Control and access are becoming a hot button for orgs Interview  "It's our data, it's our intellectual property. Being able to migrate it out those systems is near impossible... It was a real frustration for us."…  ( 9 min )

This shouldn't come as much of a surprise if you've been reading the headlines at all Government departments are guilty of high levels of non-compliance with the UK's off-payroll tax regime, according to a report by MPs.…  ( 8 min )

Two hour outage 'consistent with an intentional disruption to service' said NetBlocks Internet interruption-watcher NetBlocks has reported internet outages across Pakistan on Wednesday, perhaps timed to coincide with large public protests over the ousting of Prime Minister Imran Khan.…  ( 8 min )

Interpol, cops swoop with intel from cybersecurity bods Interpol and cops in Africa have arrested a Nigerian man suspected of running a multi-continent cybercrime ring that specialized in phishing emails targeting businesses.…  ( 9 min )

Hypervisor giant too big to be kept ticking over like CA or Symantec. Instead it can wrangle net-connected kit Comment  Broadcom’s mooted acquisition of VMware looks odd at face value, but if considered as a means to make edge computing and the Internet of Things (IoT) more mature and manageable, and give organizations the tools to drive them, the deal makes rather more sense.…  ( 9 min )

A 'Very English Coop (sic) d'Etat' Emails between leading pro-Brexit figures in the UK have seemingly been stolen and leaked online by what could be a Kremlin cyberespionage team.…  ( 8 min )

Government has power to unwind transactions such as sale of Newport facility to China-controlled Nexperia The UK’s Department for Business, Energy & Industrial Strategy has commenced a full national security assessment of Newport Wafer Fab’s acquisition by China-controlled entity Nexperia.…  ( 8 min )

Incident comes a week after 'SAP glitch' kept some planes on the taxiway Indian budget airline SpiceJet on Wednesday attributed delayed flights to a ransomware attack.…  ( 8 min )

Nifty slogan and more software suggested as the rectification Mitsubishi Electric has admitted to widespread cheating on its internal quality control efforts.…  ( 8 min )

This week: Subsidiary's QA staff officially unionize, $18m settlement disputed, and more Current and former Activision Blizzard staff are stepping up their organizing and pressure campaigns on execs as the video-game giant tries to close its $68.7bn acquisition by Microsoft.…  ( 10 min )

Sure, stonking server and gaming sales, but hiring and expenses to slow down, too Nvidia exceeded market expectations and on Wednesday reported record first-quarter fiscal 2023 revenue of $8.29 billion, an increase of 46 percent from a year ago and eight percent from the previous quarter.…  ( 9 min )

Meanwhile, Twitter coughs up $150m after using account security contact details for advertising Miscreants have dumped on Telegram more than 142 million customer records stolen from MGM Resorts, exposing names, postal and email addresses, phone numbers, and dates of birth for any would-be identity thief.…  ( 8 min )

The maintainers of the Tails project have issued a warning that the Tor Browser that's bundled with the operating system is unsafe to use for accessing or entering sensitive information. "We recommend that you stop using Tails until the release of 5.1 (May 31) if you use Tor Browser for sensitive information (passwords, private messages, personal information, etc.)," the project said in an  ( 3 min )

Twitter, which is in the process of being acquired by Tesla CEO Elon Musk, has agreed to pay $150 million to the U.S. Federal Trade Commission (FTC) to settle allegations that it abused non-public information collected for security purposes to serve targeted ads. In addition to the monetary penalty for "misrepresenting its privacy and security practices," the company has been banned from  ( 3 min )

Charm Industrial has gained attention for its unusual approach to storing away carbon dioxide: converting plant matter into bio-oil that it then pumps into deep wells and salt caverns. (See related story.) But the San Francisco startup is now exploring whether that oil could be used to cut emissions from iron and steelmaking as well,…  ( 4 min )

In recent weeks, a crew of staffers from a company called Charm Industrial have been working on the edge of Kansas corn fields, moving rolled bales of stalks, leaves, husks, and tassels up to a white semi-trailer. Inside, a contraption called a pyrolyzer uses high temperatures in the absence of oxygen to break down the…  ( 9 min )

Neue Modelle der IT-Arbeit versprechen Angestellten mehr Freiheit im Alltag – und eröffnen auch für Freelancer neue Chancen, glaubt Peggy de Lange.  ( 5 min )

Myles C. Maxfield on the WebKit Blog published a nifty how-to for color fonts. It comes on the heels of what Ollie wrote up here on CSS-Tricks the other day, and while they cover a lot of common … Customizing Color Fonts on the Web originally published on CSS-Tricks. You should get the newsletter.  ( 1 min )

The Federal Trade Commission has fined Twitter $150 million for using phone numbers and email addresses collected to enable two-factor authentication for targeted advertising. [...]  ( 4 min )

Microsoft has announced that Windows Subsystem for Linux (WSL2) distros are now supported on Windows Server 2022 after installing this week's cumulative update previews. [...]  ( 3 min )

A new ransomware named 'Cheers' has appeared in the cybercrime space and has started its operations by targeting vulnerable VMware ESXi servers. [...]  ( 4 min )

Microsoft has improved the account settings in the latest Windows 11 preview build, a settings page that now lists Office subscriptions linked to the user's Microsoft 365 account. [...]  ( 3 min )

The ChromeLoader malware is seeing an uptick in detections this month, following a relatively stable operation volume since the start of the year, which means that the malvertiser is now becoming a widespread threat. [...]  ( 4 min )

Tails developers have warned users to stop using the portable Debian-based Linux distro until the next release if they're entering or accessing sensitive information using the bundled Tor Browser application. [...]  ( 3 min )

​The Versus Market, one of the most popular English-speaking criminal darknet markets, is shutting down after discovering a severe exploit that could have allowed access to its database and exposed the IP address of its servers. [...]  ( 4 min )

As medical devices become more connected and reliant on software, their codebase grows both in size and complexity, and they are increasingly reliant on third-party and open source software components. Learn more from 150 senior decision makers who oversee product security or cybersecurity compliance in the medical device industry, [...]  ( 4 min )

The hacker of 'ctx' and 'PHPass' libraries has now broken silence and explained the reasons behind this hijack to BleepingComputer. According to the hacker, this was a bug bounty exercise and no malicious activity was intended. [...]  ( 6 min )

After a year-long investigation that involved Interpol and several cybersecurity companies, the Nigeria Police Force has arrested an individual believed to be in the top ranks of a prominent business email compromise (BEC) group known as SilverTerrier or TMT. [...]  ( 4 min )

Indian low-cost airline SpiceJet has informed its customers of an attempted ransomware attack that has impacted some of its systems and caused delays on flight departures today. [...]  ( 4 min )

New research into the inner workings of the stealthy BPFdoor malware for Linux and Solaris reveals that the threat actor behind it leveraged an old vulnerability to achieve persistence on targeted systems. [...]  ( 5 min )

Microsoft has released optional cumulative update previews for Windows 11, Windows 10 version 1809, and Windows Server 2022, with fixes for Direct3D issues impacting client and server systems. [...]  ( 4 min )

The privacy-focused DuckDuckGo browser purposely allows Microsoft trackers on third-party sites due to an agreement in their syndicated search content contract between the two companies. [...]  ( 5 min )

Meanwhile, Tails 5.0 users told to stop what they're doing over Firefox flaw DuckDuckGo promises privacy to users of its Android, iOS browsers, and macOS browsers – yet it allows certain data to flow from third-party websites to Microsoft-owned services.…  ( 9 min )

Someone got Zuck'd Meta’s AI business unit set up shop in Microsoft Azure this week and announced a strategic partnership it says will advance PyTorch development on the public cloud.…  ( 8 min )

AI and quantum supercomputing resources available to global customers IT services biz Atos has introduced a suite of cloud-based high-performance computing (HPC) services, based around technology gained from its purchase of cloud provider Nimbix last year.…  ( 8 min )

Occasional gaping hole and overprivileged users still blight the Beast of Redmond Despite a record number of publicly disclosed security flaws in 2021, Microsoft managed to improve its stats, according to research from BeyondTrust.…  ( 9 min )

Car maker says miscreants used stolen logins to break into folks' accounts Automaker General Motors has confirmed the credential stuffing attack it suffered last month exposed customers' names, personal email addresses, and destination data, as well as usernames and phone numbers for family members tied to customer accounts.…  ( 10 min )

What's Mandarin for 'Where's my money?' For five years, Foxconn promised and spectacularly failed to build a much-hyped sprawling factory near Mount Pleasant, Wisconsin. Now, the area's leaders may be saddled with $300 million in bond repayments that the Taiwanese iPhone maker had promised to repay. …  ( 8 min )

Local officials might be saddled with $300 million bond repayment Foxconn promised to repay. For five years, Foxconn promised to build a massive factory in Wisconsin. Now, however, local officials are worried they'll be saddled with $300 million in bond repayments that the Taiwanese iPhone maker promised to repay. …  ( 8 min )

As Google guru who ported it points out, the operating system did not exist when 1-2-3 came out in 1983 A long lost native Unix version of the killer PC spreadsheet has not only been rediscovered, but almost unbelievably, it's been updated to create a native Linux version.…  ( 10 min )

Purchasing teams are a bit like help desks – always being asked to answer dumb or inappropriate questions ServiceNow's efforts to expand into more industries will soon include a Procurement Service Management product.…  ( 7 min )

Wafer madness hits the LRZ in HPE Superdome supercomputer wrapper HPE and Cerebras Systems have built a new AI supercomputer in Munich, Germany, pairing a HPE Superdome Flex with the AI accelerator technology from Cerebras for use by the scientific and engineering community.…  ( 10 min )

Advocates for MySQL and PostgreSQL see broader future for movement they helped create MySQL pioneer Peter Zaitsev, an early employee of MySQL AB under the original open source database author Michael "Monty" Widenius, once found it easy to identify the enemy.…  ( 12 min )

Paper authors warn Elon Musk's 2,400 machines could be used offensively An egghead at the Beijing Institute of Tracking and Telecommunications, writing in a peer-reviewed domestic journal, has advocated for Chinese military capability to take out Starlink satellites on the grounds of national security.…  ( 8 min )

Some of us have used them for decades, some are seeing them for the first time on marketing slides Systems Approach  Explaining what an API is can be surprisingly difficult.…  ( 11 min )

Developers, developers... and top secret coffee machines. Security at MS is definitely tighter 25 years later Former Microsoft staffer Dave Plummer has revealed how he managed to sneak his wife into a corporate event so that she might experience a Steve Ballmer presentation first hand. The old romantic.…  ( 9 min )

But think tank says its past attempts at working together haven't gone well Leaders of the Quad alliance – Australia, India, Japan, and the USA – met on Tuesday and revealed initiatives to strengthen collaboration on emerging technologies and cybersecurity, with an unspoken subtext of neutralizing China.…  ( 9 min )

In detail: Ocean's Eleven-grade ruse in which victims' profiles are rigged from the start Two security researchers have identified five related techniques for hijacking internet accounts by preparing them to be commandeered in advance.…  ( 11 min )

Another rush job for busy Indian IT shops Indian IT shops have been handed another extraordinarily short deadline within which to perform significant infosec work.…  ( 8 min )

Treatment could stop coronavirus from replicating inside body An oral medication designed by scientists with the help of AI algorithms could one day treat patients with COVID-19 and other types of diseases caused by coronaviruses.…  ( 8 min )

CTO shares datacenter secrets with The Reg: NVMe, MariaDB, mid-range x86 CPUs, S3-alike, and more The tech world's pandemic supply chain meltdown drove ServiceNow to place orders for a year worth of datacenter kit in January 2022, believing that doing so was necessary to get the hardware it needed to cope with growing customer workloads.…  ( 9 min )

Cloudy server testbed coming, open source code filtering into RHEL promised Samsung and Red Hat have pledged to work together on developing software to get the best from emerging memory technologies.…  ( 8 min )

Software-tuning suite could be used to show where and how Xeon trumps rivals, if customers can believe it Analysis  Intel is facing tough competition in the server CPU space, and one way it's trying to stand out — besides trying to make better chips — is its newly acquired Granulate cloud optimization software business that aims to improve application performance and reduce infrastructure costs.…  ( 10 min )

I get knocked down but I get up again, Italy, Canada, UK, ACLU, Facebook, Google, YouTube, Twitter... are never gonna keep me down Clearview AI is reportedly expanding its facial-recognition services beyond law enforcement to include private industries, such as banking and education, amid mounting pressure from regulators, Big Tech, and privacy campaigners.…  ( 8 min )

Or so says Google after tracking 30+ vendors peddling surveillance malware Spyware vendor Cytrox sold zero-day exploits to government-backed snoops who used them to deploy the firm's Predator spyware in at least three campaigns in 2021, according to Google's Threat Analysis Group (TAG).…  ( 9 min )

Domain associated with maintainer email expired, taken over in supply-chain attack The Python Package Index (PyPI), a repository for Python software libraries, has advised Python developers that the ctx package has been compromised.…  ( 9 min )

Might be something for those who find AWS, Azure, GCP overly complex DigitalOcean dipped its toes in the serverless seas Tuesday with the launch of a Functions service it's positioning as a developer-friendly alternative to Amazon Web Services Lambda, Microsoft Azure Functions, and Google Cloud Functions.…  ( 8 min )

Die österreichische Regierung will verstärkt gegen Deepfakes vorgehen. Dabei erwägt sie auch ein Verbot für Technik, mit der Deepfakes hergestellt werden.  ( 4 min )

Telekom und Inmarsat haben ihr Satelliten- und LTE-Netz European Aviation Network (EAN) ausgebaut. So funktioniert das schnelle Internet über der Nordsee.  ( 4 min )

Der IT-Dienstleister der Bundeswehr will die Digitalisierung voranbringen. 90 Millionen Euro sollen in Software investiert werden.  ( 3 min )

Laut der Campus-Polizei der Oklahoma State University gab es einige Fälle, bei denen fremde Airtags an Objekten und Autos von Studierenden gefunden wurden.  ( 4 min )

Das Spring-Team erläutert, wie es sich auf die nächste Generation des Java-Framworks vorbereitet: nach Spring Boot 2.7 folgt der Ausblick auf die Version 3.0.  ( 4 min )

Veeam hat ein neues Tool angekündigt: Backup for Salesforce orientiert sich am M365-Äquivalent. Bei letzterem gibt es zudem mehr Sicherheit und Transparenz.  ( 3 min )

Das BSI meldet, dass es seine Sicherheits-Analysen aus dem SiSyPHuS-Projekt aktualisiert hat. Diese sind nun auf dem Stand von Windows 10 Version 1809.  ( 4 min )

Das Update der Plug-in- und Library-Sammlung zum Erstellen Cloud-nativer Java-Anwendungen erlaubt Auswahl von Fragmenten aus mehreren Environment Directories.  ( 4 min )

Die "iOS-App-Economy" bleibt laut Apple ein Wachstumsmotor in Europa. Am Horizont droht die erzwungene Öffnung der App-Läden durch die EU-Kommission.  ( 4 min )

Speziell für Entwickler präsentierte Microsoft auf der Build-Konferenz unter anderem einen ARM64-basierten PC sowie einen Arbeitsplatz in der Cloud.  ( 6 min )

Der E-Mail-Anbieter ProtonMail hat seine Geschäftszweige unter dem Namen Proton gebündelt. Dazu gehören Protons E-Mail-, VPN-, Cloud- und Kalenderdienst.  ( 3 min )

Den mit Version 15 eingeführten 8-wöchigen Rhythmus verlängert das Electron-Team wieder auf 12 Wochen, um Releases besser auf Chromium-Milestones abzustimmen.  ( 3 min )

Veeam spendiert seinem Datenmanagement-Tool Backup & Replication in Version 12 unter anderem einen neuen Notfall-Backup-Dienst.  ( 4 min )

Zwei neue MX-Tastaturen von Logitech verwenden mechanische Switches. Zudem erscheint die spieletaugliche Maus MX Master 3S mit neuem optischem Sensor.  ( 4 min )

Kurz vor der Eröffnung der Hannover Messe bringt Cisco Systems einen neuen Access Point mit Wi-Fi 6E für raue Umgebungen.  ( 4 min )

Parallel zum jüngsten Release der Mac-Variante von Microsofts Entwicklungsumgebung ist eine Preview der Version 17.3 erschienen.  ( 4 min )

Die Sprache kann neuerdings neben CommonJS- auch ECMAScript-Module verarbeiten und bekommt dafür neue Dateiendungen.  ( 5 min )

In fünf digitalen Live-Trainings lernen Interessierte, wie sie ihre Arbeit mit dem SQL Server meistern. Jetzt verlosen wir 5 Tickets für die Webinar-Serie.  ( 4 min )

Die neue Version bringt untere anderem weitere Funktionen für das Full Site Editing, mehr Blöcke sowie Optimierung von Performance und Barrierefreiheit.  ( 4 min )

Der Webbrowser Google Chrome ist in Version 102 erschienen, die eine große Zahl an Sicherheitslücken abdichtet. Sie soll ungenannte neue Features enthalten.  ( 4 min )

Apples neue Privatsphärenfunktionen Protect Mail Activity und Private Relay schalten sich ohne Nachfrage ab, wenn Wireguard & Co. aktiv werden.  ( 5 min )

Bereitstellungsprogramme, Geräteverwaltung, User Enrollment, BYOD: Das Live-Webinar erklärt, wie iOS sich richtig im Unternehmen nutzen lässt.  ( 4 min )

Jetzt aktualisieren: Der Zoom-Client ist unter Android, iOS, Linux, macOS und Windows verwundbar.  ( 3 min )

Auf der Microsoft Build 2022 hat das Unternehmen Verbesserungen für den Store angekündigt. So lassen sich installierte Apps auf neuen Rechnern wiederherstellen.  ( 4 min )

Nach OpenAI schickt auch Google ein neues KI-System ins Rennen, das mit tiefem Sprachverständnis durch Text-zu-Bild-Synthese fotorealistische Bilder erzeugt.  ( 6 min )

Wie lässt sich Microsofts Office-Paket aus der Cloud sicher und in Übereinstimmung mit den unternehmenseigenen Compliance-Regeln einsetzen? 10% Rabatt bis 8.6.  ( 3 min )

Earlier this year, I self-published an ebook called Understanding JavaScript Promises (free for download). Even though I didn’t have any intention of turning it into a print book, enough people reached out inquiring about a print version that … A Perfect Table of Contents With HTML + CSS originally published on CSS-Tricks. You should get the newsletter.  ( 9 min )

A year-long international investigation has resulted in the arrest of the suspected head of the SilverTerrier cybercrime group by the Nigeria Police Force. "The suspect is alleged to have run a transnational cybercrime syndicate that launched mass phishing campaigns and business email compromise schemes targeting companies and individual victims," Interpol said in a statement.  ( 2 min )

A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to pinpoint such rogue devices without much of a hassle. The system, dubbed Lumos, is designed with this  ( 3 min )

If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: "supply chain attack".  A software supply chain attack happens when hackers manipulate the code in third-party software components to compromise the 'downstream' applications that use them. In 2021, we have seen a dramatic rise in such attacks: high profile security incidents like the SolarWinds,  ( 6 min )

Malicious actors can gain unauthorized access to users' online accounts via a new technique called "account pre-hijacking," new research has found. The attack takes aim at the account creation process that's ubiquitous in websites and other online platforms, enabling an adversary to perform a set of actions before an unsuspecting victim creates an account in a target service. The study was led  ( 4 min )

An unknown advanced persistent threat (APT) group has been linked to a series of spear-phishing attacks targeting Russian government entities since the onset of the Russo-Ukrainian war in late February 2022. "The campaigns [...] are designed to implant a Remote Access Trojan (RAT) that can be used to surveil the computers it infects, and run commands on them remotely," Malwarebytes said in a  ( 4 min )

Security incidents occur. It's not a matter of "if," but of "when." That's why you implemented security products and procedures to optimize the incident response (IR) process. However, many security pros who are doing an excellent job in handling incidents find effectively communicating the ongoing process with their management a much more challenging task. Feels familiar? In many organizations,  ( 4 min )

Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages and execute malicious code. Tracked from CVE-2022-22784 through CVE-2022-22787, the issues range between 5.9 and 8.1 in severity. Ivan Fratric of Google  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The dark secret behind those cute AI-generated animal images Another month, another flood of weird, wonderful and cute images generated by an artificial intelligence. In April, OpenAI showed off its new picture-making neural…  ( 4 min )

Another month, another flood of weird and wonderful images generated by an artificial intelligence. In April, OpenAI showed off its new picture-making neural network, DALL-E 2, which could produce remarkable high-res images of almost anything it was asked to. It outstripped the original DALL-E in almost every way. Now, just a few weeks later, Google…  ( 5 min )

In this article, Frank Joseph explains both weak and strong references in JavaScript, as well as the concept of reachability. Let’s dig in!  ( 7 min )

Der Webbrowser Google Chrome ist in Version 102 erschienen, die eine große Zahl an Sicherheitslücken abdichtet. Sie soll ungenannte neue Features enthalten.  ( 4 min )

Jetzt aktualisieren: Der Zoom-Client ist unter Android, iOS, Linux, macOS und Windows verwundbar.  ( 3 min )

Google Project Zero blows lid off bug involving that old chestnut: XML parsing Zoom has fixed a security flaw in its video-conferencing software that a miscreant could exploit with chat messages to potentially execute malicious code on a victim's device.…  ( 8 min )

It has this weird habit of drawing stereotyped White people, team admit DALL·E 2 may have to cede its throne as the most impressive image-generating AI to Google, which has revealed its own text-to-image model called Imagen.…  ( 9 min )

Facebook builds FORT to protect against onslaught of regulation, investigation Meta's ad transparency tools will soon reveal another treasure trove of data: advertiser targeting choices for political, election-related, and social issue spots.…  ( 8 min )

Just as Samsung pledges to invest $360b to shore up next-gen industries Toyota is to slash global production of motor vehicles due to the semiconductor shortage. The news comes as Samsung pledges to invest about $360 billion over the next five years to bolster chip production, along with other strategic sectors.…  ( 8 min )

Amazon Appstore preview goes wider, plus Windows on Arm platform with Neural Processing Units – Project Volterra Microsoft Build  Windows still rules the enterprise, and among all the Azure and Power Platform action during Microsoft's annual Build event for developers, the company had news for users of its flagship operating system.…  ( 8 min )

The Register speaks to Jim Walker about maturity and super regions Cockroach Labs has finally added a new command line tool with the release of version 22.1 of its eponymous database, out today.…  ( 9 min )

'Experimental' systemd-sysupdate feature likely to get the most attention Version 251 of the controversial systemd Linux init system is here, and you can expect it to feature in the next version of your preferred distro.…  ( 8 min )

The software giant's 'orderly exit' appears to be ongoing A Ukrainian minister has accused software giant SAP of continuing to operate in Russia despite the German vendor previously vowing to withdraw from the aggressor nation.…  ( 8 min )

Graz University findings will become more significant as more AI work is done Neuromorphic chips have been endorsed in research showing that they are much more energy efficient at operating large deep learning networks than non-neuromorphic hardware.…  ( 9 min )

German optics giant jumps ship to make smartphone cameras for Xiaomi instead Huawei's long established trading relationship with Leica to integrate the German camera maker's technology into its phones is over, the companies have confirmed.…  ( 8 min )

Crafty file names, encrypted malicious code, Office flaws – ah, it's like the Before Times HP's cybersecurity folks have uncovered an email campaign that ticks all the boxes: messages with a PDF attached that embeds a Word document that upon opening infects the victim's Windows PC with malware by exploiting a four-year-old code-execution vulnerability in Microsoft Office.…  ( 10 min )

What does that mean? Better latency and a replacement for PulseAudio The next release of Ubuntu, version 22.10 and codenamed Kinetic Kudu, will switch audio servers to the relatively new PipeWire.…  ( 10 min )

Is... is that why Broadcom wants to buy it? The future of high-performance computing will be virtualized, VMware's Uday Kurkure has told The Register.…  ( 10 min )

Arm one year, x86 the next, and always faster than a certain chip shop that still can't ship even one standalone GPU Computex  Nvidia's push deeper into enterprise computing will see its practice of introducing a new GPU architecture every two years brought to its CPUs and data processing units (DPUs, aka SmartNICs).…  ( 8 min )

Big Bezos is watching you Amazon is reportedly installing AI-powered cameras in delivery vans to keep tabs on its drivers in the UK.…  ( 8 min )

Just one instance type for now, but cheaper than third-gen Xeons or EPYCs Amazon Web Services has made its latest homebrew CPU, the Graviton3, available to rent in its Elastic Compute Cloud (EC2) infrastructure-as-a-service offering.…  ( 9 min )

Announcement comes as Chinese ride-hailing DiDi Chuxing delists from NYSE under pressure The Chinese government has announced that it will again allow "platform companies" – Beijing's term for tech giants – to list on overseas stock markets, marking a loosening of restrictions on the sector.…  ( 8 min )

x86 still 'very important' we're told as lid lifted on Arm-based kit Computex  Nvidia's Grace CPU and Hopper Superchips will make their first appearance early next year in systems that'll be based on reference servers unveiled at Computex 2022 this week.…  ( 9 min )

For those who want to give their racks an air cut Nvidia's GPUs are becoming increasingly more power hungry, so the US giant is hoping to make datacenters using them "greener" with liquid-cooled PCIe cards that contain its highest-performing chips.…  ( 8 min )

Think we speak for everyone when we say: Seriously, what the f...? Broadcom is to acquire VMware for $60 billion in a deal that will be announced on Thursday.…  ( 9 min )

School-friendly tool still not fully protected, privacy guru warns Screencastify, a popular Chrome extension for capturing and sharing videos from websites, was recently found to be vulnerable to a cross-site scripting (XSS) flaw that allowed arbitrary websites to dupe people into unknowingly activating their webcams.…  ( 10 min )

As Supreme Court set to overturn Roe v Wade, safeguards on location info now more vital than ever Democrat senators have urged America's Federal Trade Commission to do something to protect the privacy of women after it emerged details of visits to abortion clinics were being sold by data brokers.…  ( 8 min )

Mozilla has released security updates for multiple products to address zero-day vulnerabilities exploited during the Pwn2Own Vancouver 2022 hacking contest. [...]  ( 3 min )

Hackers are targeting Russian government agencies with phishing emails that pretend to be Windows security updates and other lures to install remote access malware. [...]  ( 4 min )

Microsoft's security researchers have observed a worrying trend in credit card skimming, where threat actors employ more advanced techniques to hide their malicious info-stealing code. [...]  ( 4 min )

The Cybersecurity & Infrastructure Security Agency (CISA) has added 41 vulnerabilities to its catalog of known exploited flaws over the past two days, including flaws for the Android kernel and Cisco IOS XR. [...]  ( 3 min )

A report published today by U.S. Senator Gary Peters, Chairman of the Senate Homeland Security and Governmental Affairs Committee, says law enforcement and regulatory agencies lack insight into ransomware attacks to fight against them effectively. [...]  ( 3 min )

The popular Screencastify Chrome extension has fixed a vulnerability that allowed malicious sites to hijack users' webcams and steal recorded videos. However, security flaws still exist that could be exploited by unscrupulous insiders. [...]  ( 5 min )

Trend Micro says it patched a DLL hijacking flaw in Trend Micro Security used by a Chinese threat group to side-load malicious DLLs and deploy malware. [...]  ( 3 min )

Proof-of-concept exploit code is about to be published for a vulnerability that allows administrative access without authentication in several VMware products. [...]  ( 4 min )

PyPI module 'ctx' that gets downloaded over 20,000 times a week has been compromised in a software supply chain attack with malicious versions stealing the developer's environment variables. Additionally, versions of a 'phpass' fork published to the PHP/Composer package repository Packagist had been altered to steal secrets. [...]  ( 5 min )

US car manufacturer GM disclosed that it was the victim of a credential stuffing attack last month that exposed customer information and allowed hackers to redeem rewards points for gift cards. [...]  ( 4 min )

US car manufacturer GM disclosed that it was the victim of a credential stuffing attack last month that exposed customer information and allowed hackers to redeem rewards points for gift cards. [...]  ( 4 min )

SQL Server 2022 erlaubt ein Failover lokaler Datenbankinstanzen zu Azure SQL. Die Cloud-Datenbank wird so zum Replikat, das im Notfall die Führung übernimmt.  ( 6 min )

Der Angriff war am frühen Morgen bemerkt worden. Experten versuchen, herauszufinden, wer dahintersteckt. Auch Mittwoch bleiben viele Ämter geschlossen.  ( 4 min )

Mit der .NET Multi-Platform App UI führt Microsoft Xamarin und .NET nun endlich zur einer Cross-Plattform-Bibliothek zusammen. Linux geht dabei leer aus.  ( 9 min )

Laut Bitkom setzen über 50 Prozent der Unternehmen auf KI, IoT und digitale Zwillinge. Viele Firmen bemängeln aber die Regierungs-Bemühungen in diesen Sektoren.  ( 5 min )

126. Deutscher Ärztetag: Für die elektronische Patientenakte will Bundesgesundheitsminister Karl Lauterbach (SPD) das Opt-Out-Verfahren anwenden.  ( 5 min )

Der neue Linux-Kernel kommt mit dem kontroversen Hardware-Abo von Intel, leitet das Ende von ReiserFS ein und wechselt erstmalig zu einem neueren C-Standard.  ( 5 min )

Das BSI will Sicherheit und Qualität von Geräten mit dem IT-Sicherheitskennzeichen belohnen. Es hat nun die ersten Formulare von Routern fertig geprüft.  ( 4 min )

Mit Hilfe von KI versucht die niederländische Polizei, einen fast 20 Jahre alten Fall zu lösen.  ( 4 min )

Die LC3 von Ezviz besteht aus einer Überwachungskamera mit Personenerkennung, 2K-Auflösung und WDR sowie einer 700 Lumen starken und dimmbaren LED-Leuchte.  ( 8 min )

Bei der GoodWill-Ransomware ist der Name Programm.  ( 3 min )

iOS-Apps wie Netflix dürfen erstmals einen externen Link einbauen, der Nutzern Käufe im Web ermöglicht – nach einem Apple-Warnhinweis.  ( 4 min )

Basis der AWS-Instanz C7g ist erstmals die neue ARM-Server-CPU Graviton3 mit ungewöhnlicher Architektur, die die Weiterentwicklungen vereinfachen soll.  ( 4 min )

Die Kassenärztliche Bundesvereinigung fordert von der Agentur für digitale Medizin unter anderem, "Baustellen schnellstmöglich zu beheben".  ( 4 min )

Data Scientists, Data Engineers und Data Teams können sich ab sofort schon vor Programmveröffentlichung die vergünstigte Teilnahme an der data2day sichern.  ( 4 min )

macOS 12.4, iOS 15.5 und Co. bleiben nicht die letzten Releases des aktuellen Jahrgangs. Vor macOS 13 und iOS 16 werden noch Updates kommen.  ( 4 min )

Wer die Google Kubenetes Engine nutzt, kann nun deren monatliche Preise detailliert im Voraus berechnen. Jedoch handelt es sich hierbei bloß um eine Schätzung.  ( 3 min )

Die "zerstörerischste Ransomware" soll verschwinden; der Angriff auf Costa Rica ist offenbar nur das Grande Finale. Doch im Hintergrund wird weiter erpresst.  ( 4 min )

Bis zum 8. Juni können sich Personen aus unterrepräsentierten Gruppen für ein Diversity-Ticket für die JavaScript-Konferenz bewerben.  ( 4 min )

Im Rahmen der Computex hat Nvidia erste Server mit dem ARM-Prozessor Grace in Aussicht gestellt. Fürs Rechenzentrum kommen außerdem wassergekühlte GPUs.  ( 4 min )

Mehrere Wochen waren die Downloads von Windows-Evaluierungsversionen gestört. Jetzt gibt es Entwarnung: Die ISO-Images sind wieder auf regulärem Weg erhältlich.  ( 3 min )

Mobiles Internet soll Mitgliedern der Bundeswehr die Freizeit bei Einsätzen versüßen – dafür kommen Satellitensysteme wie Starlink infrage.  ( 3 min )

Der Netzwerkausrüster Zyxel warnt vor mehreren Sicherheitslücken in den Access-Points, Access-Point-Controllern sowie Firewalls. Updates sind verfügbar.  ( 3 min )

Wie geht rechtssicherer IT-Betrieb? Der Online-Tagesworkshop am 9. Juni klärt über die Rechte, Pflichten und Handlungsmöglichkeiten von Administrierenden auf.  ( 3 min )

Wer Mozillas Firefox und Thunderbird nutzt, sollte diese aus Sicherheitsgründen aktualisieren. Die Lücken waren im Rahmen eines Hacker-Wettbewerbs aufgetaucht.  ( 3 min )

Microsoft hat ein Archiv, in dem viele Produkte und Kampagnen aus der Unternehmensgeschichte konserviert werden. Ein Microsoft-Fellow gibt jetzt Einblicke.  ( 3 min )

Im Sonderheft "c't Sicher ins Netz" erfahren Sie, wie man Online-Konten ohne viel Aufwand optimal absichert, und wie sich Lauscher im Netz ausperren lassen.  ( 4 min )

Die Gesichtserkennungsdatenbank Clearview AI muss eine Geldstrafe von mehr als 7,5 Millionen Pfund zahlen und seine britischen Daten löschen.  ( 4 min )

Even as the operators of Conti threatened to overthrow the Costa Rican government, the notorious cybercrime gang officially took down their infrastructure in favor of migrating their criminal activities to other ancillary operations, including Karakurt and BlackByte. "From the negotiations site, chatrooms, messengers to servers and proxy hosts - the Conti brand, not the organization itself, is  ( 4 min )

Two trojanized Python and PHP packages have been uncovered in what's yet another instance of a software supply chain attack targeting the open source ecosystem. One of the packages in question is "ctx," a Python module available in the PyPi repository. The other involves "phpass," a PHP package that's been forked on GitHub to distribute a rogue update. "In both cases the attacker appears to have  ( 4 min )

Let's face it: we all use email, and we all use passwords. Passwords create inherent vulnerability in the system. The success rate of phishing attacks is skyrocketing, and opportunities for the attack have greatly multiplied as lives moved online. All it takes is one password to be compromised for all other users to become victims of a data breach.  To deliver additional security, therefore,  ( 5 min )

Cybersecurity researchers have disclosed details of the latest version of the Chaos ransomware line, dubbed Yashma. "Though Chaos ransomware builder has only been in the wild for a year, Yashma claims to be the sixth version (v6.0) of this malware," BlackBerry research and intelligence team said in a report shared with The Hacker News. Chaos is a customizable ransomware builder that emerged in  ( 3 min )

In this day and age, we are not dealing with roughly pieced together, homebrew type of viruses anymore. Malware is an industry, and professional developers are found to exchange, be it by stealing one's code or deliberate collaboration. Attacks are multi-layer these days, with diverse sophisticated software apps taking over different jobs along the attack-chain from initial compromise to  ( 6 min )

Threat actors behind web skimming campaigns are leveraging malicious JavaScript code that mimics Google Analytics and Meta Pixel scripts in an attempt to sidestep detection. "It's a shift from earlier tactics where attackers conspicuously injected malicious scripts into e-commerce platforms and content management systems (CMSs) via vulnerability exploitation, making this threat highly evasive to  ( 3 min )

So, SVG has this stroke-miterlimit presentation attribute. You’ve probably seen it when exporting an SVG from a graphic editor program, or perhaps you find out you could remove it without noticing any change to the visual appearance. After a good … Mastering SVG’s stroke-miterlimit Attribute originally published on CSS-Tricks. You should get the newsletter.  ( 6 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The walls are closing in on Clearview AI Controversial facial recognition company Clearview AI has been fined more than $10 million by the UK’s data protection watchdog for collecting the faces of UK…  ( 4 min )

Controversial facial recognition company Clearview AI has been fined almost $10 million by the UK’s data protection watchdog for collecting the faces of UK citizens from the web and social media. The firm was also ordered to delete all of the data it holds on UK citizens. The move by the UK’s Information Commissioner’s Office…  ( 4 min )

This article is a case study of how the platformOS team has researched, developed, and iteratively adjusted their onboarding processes over more than three years to eventually create the multiple award winning developer experience they provide today.  ( 21 min )

Der Netzwerkausrüster Zyxel warnt vor mehreren Sicherheitslücken in den Access-Points, Access-Point-Controllern sowie Firewalls. Updates sind verfügbar.  ( 3 min )

Wer Mozillas Firefox und Thunderbird nutzt, sollte diese aus Sicherheitsgründen aktualisieren. Die Lücken waren im Rahmen eines Hacker-Wettbewerbs aufgetaucht.  ( 3 min )

I can prove CEO was 'personally involved in Facebook’s failure to protect privacy', DC AG insists Cambridge Analytica is back to haunt Mark Zuckerberg: Washington DC's Attorney General filed a lawsuit today directly accusing the Meta CEO of personal involvement in the abuses that led to the data-slurping scandal. …  ( 8 min )

So cool you're into free speech because that includes taking down misinformation While the US Supreme Court considers an emergency petition to reinstate a preliminary injunction against Texas' social media law HB 20, the US Eleventh Circuit Court of Appeals on Monday partially upheld a similar injunction against Florida's social media law, SB 7072.…  ( 9 min )

All fun and games until the chip factories are in the crosshairs US President Joe Biden has heralded an Indo-Pacific trade deal signed by several nations that do not include Taiwan. At the same time, Biden warned China that America would help defend Taiwan from attack; it is home to a critical slice of the global chip industry, after all. …  ( 9 min )

Firewall isn't a made-up word from the Hackers movie, people A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.…  ( 9 min )

High-performance platform choices are going beyond the ubiquitous x86 standard Arm-based servers continue to gain momentum with Gigabyte Technology introducing a system based on Ampere's Altra processors paired with Nvidia A100 GPUs, aimed at demanding workloads such as AI training and high-performance compute (HPC) applications.…  ( 8 min )

GitOps fans can take a spin on the free tier for pull-based deployment One-stop DevOps shop GitLab has announced version 15 of its platform, hot on the heels of pull-based GitOps turning up on the platform's free tier.…  ( 8 min )

Not everyone needs it, but those who do need to consider 3 things, says Asim Razzaq The push is on to get every enterprise thinking they're missing out on the next big thing if they don't adopt a multicloud strategy.…  ( 9 min )

As staff churn at 27% a year, senior execs offered lots of shares to keep growth coming Infosys has extended Salil Parekh's term as CEO and managing director for an additional five years, according to a stock exchange filing made on Sunday.…  ( 8 min )

Dev Channel Insiders get Windows Subsystem for Android updates Microsoft is continuing to lavish love on Android for Windows with an update to Android 12.1 that disables telemetry by default, although, as Microsoft notes, "this update may cause some apps to fail to launch."…  ( 8 min )

A sign that the company is taking data sovereignty concerns more seriously Google has established a European Advisory Board for Google Cloud made up of executives drawn from across industry in the region.…  ( 8 min )

Notorious selfie-scraper must pay $9.43 million – less than half of predicted fine – says data regulator Updated  The UK's data protection body today made good on its threat to fine controversial facial recognition company Clearview AI, ordering it to stop scraping the personal data of residents from the internet, delete what it already has, and pay a £7.5 million ($9.43 million) fine.…  ( 9 min )

<movietrailer voice>The world was not ready for this gift. It is still not ready for this gift. Coming soon to a Gopherspace near you An announcement about a new handheld games console a few days ago caused confusion, because it was online but not on the web. It was published on Gopher.…  ( 8 min )

With web apps, Apple insists on taking the pith helmet Opinion  It has been 14 years since Apple opened its App Store with its shiny shopfront of tempting toys and gloomy back office of rules and rentier revenues, but only now has the proposed EU Digital Markets Act threatened to end Apple's web browser engine monopoly. …  ( 10 min )

Not so much process privilege rings, more circles of hell Who, Me?  Be careful what humorous messages you leave in your app, for you never know who might see them. Welcome to Who, Me?…  ( 9 min )

Security engineer outlines self-help strategy for keeping software supply chain safe Following the recent disclosure of a technique for hijacking certain NPM packages, security engineer Danish Tariq has proposed a defensive strategy for those looking to assess whether their web apps include dependencies tied to subvertable email domains.…  ( 10 min )

Survives all manner of indiginities in Reg tests but may stuggle to cross over from boots to suits If you drop Dell's Latitude 5430 laptop from hip height onto vinyl flooring that covers a concrete slab, it lands with a sharp crack, bounces a little, then skitters to a halt. Drop it two meters onto sodden grass and it lands with a meaty squish on its long rear edge. The impact pushes a spray of water and flecks of mud through the crack between the screen and keyboard, with a spot or two of each making it onto the keyboard's ASDF row.…  ( 10 min )

Redmond claims the numbers are scary, but won't release them Microsoft has sounded the alarm on DDoS malware called XorDdos that targets Linux endpoints and servers.…  ( 9 min )

AM5 socket to bring desktop CPUs to life in late 2022, mid-range laptop CPU to follow AMD has revealed more details of its Zen 4 processor architecture, a desktop CPU that puts it to work, and a socket to house that product.…  ( 8 min )

Less than two weeks into his new gig, Yoon cozies up to Biden as China and DPRK loom US president Biden and South Korea's new president Yoon Suk Yeol have pledged further co-operation in many technologies, including joint efforts to combat North Korea.…  ( 9 min )

Michael Dell could be the key to any deal Broadcom is in early talks to buy VMware, according to The New York Times, Bloomberg, and Reuters.…  ( 8 min )

Adds 'feature activation' for Intel silicon, but Chipzilla still isn't saying what that means Linus Torvalds has released version 5.18 of the Linux kernel.…  ( 8 min )

Forscher haben in einer klinischen Phase-1-Studie einen Virus verabreicht, der bösartige Tumore schrumpfen lassen und den Krebs heilen soll.  ( 4 min )

Apple unternimmt einen neuen Anlauf, die Abhängigkeit von China zu verringern, heißt es bei Zuliefern. Einer der Auslöser seien Covid-Lockdowns.  ( 4 min )

Nachdem ein Gericht die Einbaupflicht für intelligente Stromzähler kippte, hat das BSI auf anderem Wege vier Geräte für anwendbar erklärt.  ( 5 min )

Mit neuen Funktionen für Observability, Sicherheit, Compliance, Agilität sowie ModelOps will GitLab zur allumfassenden DevOps-Plattform reifen.  ( 4 min )

Videosprechstunden von Ärzten und Psychotherapeuten werden häufiger als im Vorjahr genutzt. Das zeigt eine Umfrage des Branchenverbands Bitkom.  ( 4 min )

In drei Tagen die großen Neuerungen in C++20 kennenlernen, sodass man sie gezielt und effektiv in eigenen Projekten einsetzen kann. Frühbucherrabatt bis 6. Juni  ( 3 min )

Vor der Computex-Keynote mehren sich die Gerüchte zu Nvidias nächster GPU-Generation "Ada Lovelace". Die ersten GPUs könnten schon bald erscheinen.  ( 4 min )

iPod-Miterfinder Tony Fadell ist weiterhin auf Nostalgietour. Anhand von Bildern des Innenlebens gibt er weitere Details über die Entstehungsgeschichte preis.  ( 4 min )

Die eintägige IIoT Conference in München schlägt die Brücke zwischen IT und Automatisierungstechnik. Frühbuchertickets gibt es jetzt noch bis zum 27. Mai 2022.  ( 3 min )

Die Aktualisierungen zum Mai-Patchday führten zu Authentifizierungsfehlern von Diensten im Active Directory. Neue Patches ohne den Fehler stehen jetzt bereit.  ( 4 min )

Die Hardware mit der Modellnummer A2657 könnte ein internes Produkt sein – oder eine neue AirPort-Basisstation.  ( 4 min )

Die USA wollen im erdnahen Orbit ein Netz von Militärsatelliten aufbauen, die miteinander Daten austauschen können. Ein erster Test verlief erfolgreich.  ( 4 min )

Besonders Macs und Zubehör sind aktuell nur schwer zu kriegen. Der chinesische Lockdown schlägt nun voll durch.  ( 4 min )

In vier digitalen Live-Trainings lernen Interessierte, wie sie eigene Machine-Learning-Projekte umsetzen. Jetzt verlosen wir 5 Tickets für die Webinar-Serie.  ( 4 min )

Oracle veröffentlicht Updates eigentlich quartalsweise zum Critical-Patch-Update-Termin. Ein Patch schließt bereits jetzt eine Lücke in der E-Business-Suite.  ( 3 min )

Der Netzwerkausrüster Cisco hat Sicherheitsupdates für verschiedene Netzwerk-Komponenten veröffentlicht.  ( 3 min )

Zwei bekannte Apple-Beobachter haben frische Infos zu neuen Produkten des iPhone-Produzenten. Es geht um Smartspeaker und Bildschirme.  ( 4 min )

In diesem Workshop lernen Admins an zwei Tagen, wie man einen Kubernetes-Cluster mit Rancher-Tools aufsetzt und produktiv betreibt. Noch Plätze frei.  ( 3 min )

In der Studie “State Of The Developer Nation“ zeigt neben JavaScript vor allem Python ein stabiles Wachstum, das dank Data Science den zweiten Platz verteidigt.  ( 5 min )

AMD legt den X670-"Extreme"-Chipsatz mit PCIe-5.0-Pflicht auf. Für günstigere Desktop-PCs kommen Mainboards mit X670 und B650.  ( 4 min )

AMD verriet Details zu den im Herbst kommenden Zen-4-Prozessoren Ryzen 7000: 15 Prozent mehr Leistung auf einem Kern als Zen 3 und integrierte RDNA2-Grafik.  ( 5 min )

Waveshare hat ein neues Baseboard mit unterbrechungsfreier Stromversorgung, Power over Ethernet und SSD-Slot im Programm.  ( 4 min )

Die Börse feiert AMD für gute Zahlen und straft Intel für einen schwachen Ausblick. Apple klagt gegen Ex-Mitarbeiter. Intel bringt Grafikchips.  ( 5 min )

A threat actor targeted security researchers with fake Windows proof-of-concept exploits that infected devices with the Cobalt Strike backdoor. [...]  ( 4 min )

Scammers are now leveraging dating apps like Tinder and Grindr to pose themselves as former victims of physical abuse to gain your trust and sympathy and sell you "ID verification" services. BleepingComputer came across multiple instances of users on online dating apps being approached by these catfishing profiles. [...]  ( 6 min )

Security researchers have revealed that hackers can hijack your online accounts before you even register them by exploiting flaws that have been already been fixed on popular websites, including Instagram, LinkedIn, Zoom, WordPress, and Dropbox. [...]  ( 5 min )

Yet another data-extortion cybercrime operation has appeared on the darknet named 'RansomHouse' where threat actors publish evidence of stolen files and leak data of organizations that refuse to make a ransom payment. [...]  ( 5 min )

In a new reconnaissance campaign, the Russian state-sponsored hacking group Turla was observed targeting the Austrian Economic Chamber, a NATO platform, and the Baltic Defense College. [...]  ( 4 min )

Ahmad Shadeed — doing what he always does so well — provides an early look at the object-view-box property, something he describes as a native way to crop an image in the browser with CSS. The use case? Well, … First Look At The CSS object-view-box Property originally published on CSS-Tricks. You should get the newsletter.  ( 1 min )

As the author of a library called AgnosticUI, I’m always on the lookout for new components. And recently, I decided to dig in and start work on a new dialog (aka modal) component. That’s something many devs like to … Dialog Components: Go Native HTML or Roll Your Own? originally published on CSS-Tricks. You should get the newsletter.  ( 11 min )

Containers revolutionized the development process, acting as a cornerstone for DevOps initiatives, but containers bring complex security risks that are not always obvious. Organizations that don’t mitigate these risks are vulnerable to attack.  In this article, we outline how containers contributed to agile development, which unique security risks containers bring into the picture – and what  ( 6 min )

Fronton, a distributed denial-of-service (DDoS) botnet that came to light in March 2020, is much more powerful than previously thought, per the latest research. "Fronton is a system developed for coordinated inauthentic behavior on a massive scale," threat intelligence firm Nisos said in a report published last week. "This system includes a web-based dashboard known as SANA that enables a user  ( 3 min )

A security researcher disclosed details of a clickjacking attack demonstrated against PayPal that could be exploited to steal victims' account balances in a single click. Clickjacking, also called UI redressing, refers to a technique wherein an unwitting user is tricked into clicking seemingly innocuous webpage elements like buttons with the goal of downloading malware, redirecting to malicious  ( 3 min )

At least two research institutes located in Russia and a third likely target in Belarus have been at the receiving end of an espionage attack by a Chinese nation-state advanced persistent threat (APT). The attacks, codenamed "Twisted Panda," come in the backdrop of Russia's military invasion of Ukraine, prompting a wide range of threat actors to swiftly adapt their campaigns on the ongoing  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The hype around DeepMind’s new AI model misses what’s actually cool about it Earlier this month, DeepMind presented a new “generalist” AI model called Gato. The model can play the video game Atari, caption…  ( 4 min )

Earlier this month, DeepMind presented a new “generalist” AI model called Gato. The model can play Atari video games, caption images, chat, and stack blocks with a real robot arm, the Alphabet-owned AI lab announced. All in all, Gato can do 604 different tasks.  But while Gato is undeniably fascinating, in the week since its…  ( 5 min )

Key takeaways: Modernizing manufacturing processes reduces the amount of equipment, energy, and raw materials used in production and can significantly cut CO2 emissions. The factory floor can act as an important “command-and-control” point for a larger decarbonization journey, particularly now as the sustainability emphasis of firms expands to include Scope 1, 2, and 3 emissions.…  ( 13 min )

Die Aktualisierungen zum Mai-Patchday führten zu Authentifizierungsfehlern von Diensten im Active Directory. Neue Patches ohne den Fehler stehen jetzt bereit.  ( 4 min )

Oracle veröffentlicht Updates eigentlich quartalsweise zum Critical-Patch-Update-Termin. Ein Patch schließt bereits jetzt eine Lücke in der E-Business-Suite.  ( 3 min )

Der Netzwerkausrüster Cisco hat Sicherheitsupdates für verschiedene Netzwerk-Komponenten veröffentlicht.  ( 3 min )

CSS is constantly evolving, and some cool and useful properties either go completely unnoticed or are not talked about as much as others for some reason or another. In this article, we’ll cover a fraction of those CSS properties and selectors.  ( 13 min )

Cryptocurrency scammers are using deep fake videos of Elon Musk and other prominent cryptocurrency advocates to promote a BitVex trading platform scam that steals deposited currency. [...]  ( 4 min )

Cryptocurrency scammers are using deep fake videos of Elon Musk and other prominent cryptocurrency advocates to promote a BitVex trading platform scam that steals deposited currency. [...]  ( 4 min )

Threat analysts have discovered a recent malware distribution campaign using PDF attachments to smuggle malicious Word documents that infect users with malware. [...]  ( 4 min )

Microsoft is testing a new feature in the latest Windows 11 preview build that displays an Internet search box directly on the desktop. The problem is that it does not honor your default browser and only uses Bing and Microsoft Edge instead. [...]  ( 4 min )

Google's Threat Analysis Group (TAG) says that state-backed threat actors used five zero-day vulnerabilities to install Predator spyware developed by commercial surveillance developer Cytrox. [...]  ( 4 min )

Big OEMs hogging production and COVID causing supply issues The system-on-chip (SoC) side of the semiconductor industry is poised for growth between now and 2026, when it's predicted to be worth $6.85 billion, according to an analyst's report. …  ( 9 min )

Plus: Next PyTorch release will support Apple GPUs so devs can train neural networks on their own laptops In brief  Miscreants can easily steal someone else's identity by tricking live facial recognition software using deepfakes, according to a new report.…  ( 9 min )

Die Schweizer Regierung will die Kräfte gegen Cyberangriffe stärken und bündeln. Aus dem Nationalen Zentrum für Cybersicherheit soll ein Bundesamt werden.  ( 5 min )

The Chicago Public Schools has suffered a massive data breach that exposed the data of almost 500,000 students and 60,000 employee after their vendor, Battelle for Kids, suffered a ransomware attack in December. [...]  ( 4 min )

Yet another malicious Python package has been spotted in the PyPI registry performing supply chain attacks to drop Cobalt Strike beacons and backdoors on Windows, Linux, and macOS systems. [...]  ( 4 min )

On the third and last day of the 2022 Pwn2Own Vancouver hacking contest, security researchers successfully hacked Microsoft's Windows 11 operating system three more times using zero-day exploits. [...]  ( 3 min )

Ransomware attacks continue to slow down, likely due to the invasion of Ukraine, instability in the region, and subsequent worldwide sanctions against Russia. [...]  ( 5 min )

How? Founder tells The Register 'Robots… lots of robots' Imagine a future where racks of computer servers hum quietly in darkness below the surface of the Moon.…  ( 10 min )

Also, Chinese IT admin jailed for deleting database, and the NSA promises no more backdoors In brief  The notorious Russian-aligned Conti ransomware gang has upped the ante in its attack against Costa Rica, threatening to overthrow the government if it doesn't pay a $20 million ransom. …  ( 11 min )

Inhalteanbieter und Telekommunikationsanbieter streiten, wer die Kosten der Netze zu tragen hat. Diese Woche kam es zum Schlagabtausch mit Branchenvertretern.  ( 5 min )

Der russische Präsident sieht einen "echten Krieg in der IT-Sphäre" gegen sein Land im Gang. Doch Russland sei dagegen gut gerüstet und ergreife Gegenmaßnahmen.  ( 3 min )

An vielen Hochschulen spielt der Mainframe keine Rolle mehr, trotz seiner Bedeutung in der Wirtschaft. Professor Brune ändert das.  ( 5 min )

Rechnet Apples Mac Studio die Konkurrenz an die Wand? Wir diskutieren, welche Anwendungen wirklich vom M1 Ultra profitieren und wo Intel oder AMD besser sind.  ( 4 min )

Multiple versions of a WordPress plugin by the name of "School Management Pro" harbored a backdoor that could grant an adversary complete control over vulnerable websites. The issue, spotted in premium versions before 9.9.7, has been assigned the CVE identifier CVE-2022-1609 and is rated 10 out of 10 for severity. The backdoor, which is believed to have existed since version 8.9, enables "an  ( 2 min )

Cisco on Friday rolled out fixes for a medium-severity vulnerability affecting IOS XR Software that it said has been exploited in real-world attacks. Tracked as CVE-2022-20821 (CVSS score: 6.5), the issue relates to an open port vulnerability that could be abused by an unauthenticated, remote attacker to connect to a Redis instance and achieve code execution. "A successful exploit could allow  ( 2 min )

Cisco has addressed a zero-day vulnerability in its IOS XR router software that allowed unauthenticated attackers to remotely gain access to Redis instances running in NOSi Docker containers. [...]  ( 4 min )

Microsoft has updated the Windows Subsystem for Android in Windows 11 to make telemetry collection optional and announced an upgrade to Android 12.1. [...]  ( 4 min )

Security researchers have discovered a backdoor in a premium WordPress plugin built as a complete management solution for schools. The malicious code enables a threat actor to execute PHP code without authenticating. [...]  ( 4 min )

Microsoft has released out-of-band (OOB) updates on Thursday evening to address a newly acknowledged issue impacting Microsoft Store apps. [...]  ( 3 min )

During the second day of the Pwn2Own Vancouver 2022 hacking competition, contestants hacked Microsoft's Windows 11 OS again and demoed zero-days in Tesla Model 3's infotainment system. [...]  ( 3 min )

Sberbank's vice president and director of cybersecurity, Sergei Lebed, has told participants of the Positive Hack Days forum that the company is going through a period of unprecedented targeting by hackers. [...]  ( 4 min )

The Government of Canada announced its intention to ban the use of Huawei and ZTE telecommunications equipment and services across the country's 5G and 4G networks. [...]  ( 4 min )

The notorious Conti ransomware gang has officially shut down their operation, with infrastructure taken offline and team leaders told that the brand is no more. [...]  ( 5 min )

Netgear is pushing out fixes for a bad Orbi firmware update released earlier this month that prevents users from accessing the device's admin console. [...]  ( 4 min )

Zeldman: You may not know his name, but he played a huge part in creating the web you take for granted today. And he’s back—kind of. That would be Glenn Davis and the Verevolf site Zeldman’s talking about. The … Verevolf originally published on CSS-Tricks. You should get the newsletter.  ( 1 min )

Because Beijing isn't above covert ops to accomplish its five-year goals Chinese cyberspies targeted two Russian defense institutes and possibly another research facility in Belarus, according to Check Point Research.…  ( 9 min )

Trade watchdog, and President, reminds that COPPA can ban ya The US Federal Trade Commission on Thursday said it intends to take action against educational technology companies that unlawfully collect data from children using online educational services.…  ( 8 min )

Chinese joint venture's ousted CEO tries to hang on - who will get control? The saga surrounding Arm's joint venture in China just took another intriguing turn: a mysterious firm named Lotcap Group claims it has signed a letter of intent to buy a 51 percent stake in Arm China from existing investors in the country.…  ( 8 min )

High pricing, lack of software make smartNICs a tough sell, despite offload potential SmartNICs have the potential to accelerate enterprise workloads, but don't expect to see them bring hyperscale-class efficiency to most datacenters anytime soon, ZK Research's Zeus Kerravala told The Register.…  ( 9 min )

China refuses to share benchmarks, US sharpens focus on developing optimized software The US is racing to catch up with China in supercomputing performance amid fears that the country may widen its lead in exascale computers over the next decade, according to reports.…  ( 8 min )

With any other portable, this would be bad news for existing owners Laptop vendor Framework Computer has launched new faster models. Unlike in the case of any other laptop maker, if you already have one, this is good news.…  ( 7 min )

A couple of thruster failures shouldn't affect the Calamity Capsule's second attempt at reaching space station Two and a half years after its first disastrous launch, Boeing has once again fired its CST-100 Starliner capsule at the International Space Station.…  ( 8 min )

Factory is a model for one the company has planned in Texas US president Joe Biden kicked off his first Asian tour since taking office in South Korea, where he visited a Samsung semiconductor fab said to be the model for the company's planned plant in Taylor, Texas.…  ( 7 min )

How to make a free messaging platform bought for $22 billion profitable At Meta's first Conversations keynote yesterday, the company announced the WhatsApp Cloud API, aimed at improving the customer service experience for businesses of all sizes.…  ( 7 min )

May 10 update addressed serious vulns but also had problems of its own Microsoft has released an out-of-band patch to deal with an authentication issue that was introduced in the May 10 Windows update.…  ( 7 min )

Customers at other Sungard datacenters are not affected UK customers of datacenter and colo service provider Sungard Availability Services are to be transferred to Daisy Corporate Services, part of the Daisy Group, months after Sungard went into administration.…  ( 7 min )

The granddaddy of FOSS UNIX just keeps on trucking – and is a lot easier to install this time round The latest version of FreeBSD, 13.1, was released this week for both 32 and 64-bit forms of x86, Arm, POWER – and 64-bit RISC-V.…  ( 10 min )

Research claims it fails to autofill certain names in Han characters, Microsoft says it's technical error Updated  Microsoft search engine Bing censors terms deemed sensitive in China from its autosuggestion feature internationally, according to research from Citizen Lab.…  ( 8 min )

Hopefully an end to '... and you'll never guess what happened next!' Something for the Weekend  Another coffee, please. Yes, I know we're about to start. There is always time for one more coffee. It's good for your brain. Thanks.…  ( 10 min )

Network? What's that when it's at home? On Call  This week we bring you a shocking incident for a Register reader who was party to an electrical engineer's earthly delights.…  ( 8 min )

Startup QuSecure is the latest vendor to jump into the field with its as-a-service offering Analysis  Startup QuSecure will this week introduce a service aimed at addressing how to safeguard cybersecurity once quantum computing renders current public key encryption technologies vulnerable.…  ( 9 min )

Gitee apologises but won't explain why this is happening China’s approved GitHub clone, Gitee, has warned users that it will make all existing repositories private pending a mysterious review of their content.…  ( 8 min )

Browser makers line up for Google's extension system but complaints persist Mozilla on Wednesday launched a Developer Preview program to solicit feedback on Firefox extensions that implement Manifest v3, a Google-backed revision of browser extension architecture.…  ( 11 min )

Ban on shopping from September, rip and replace order with 2024 deadline The Canadian government has joined many of its allies and banned the use of Huawei and ZTE tech in its 5G networks, as part of a new telecommunications security framework.…  ( 9 min )

But also makes it plain that offshore entities must comply India has slightly softened its controversial new reporting requirements for information security incidents and made it plain they apply to multinational companies.…  ( 9 min )

Two becomes one as ThinkPad P16 stands alone and HX replaces mobile Xeon Lenovo has halved its range of portable workstations.…  ( 8 min )

Well, that clears things up? Maybe not. The US Justice Department has directed prosecutors not to charge "good-faith security researchers" with violating the Computer Fraud and Abuse Act (CFAA) if their reasons for hacking are ethical — things like bug hunting, responsible vulnerability disclosure, or above-board penetration testing.…  ( 11 min )

AI chips are sucking down 600W+ and the solution could be to drown them. Intel this week unveiled a $700 million sustainability initiative to try innovative liquid and immersion cooling technologies to the datacenter.…  ( 9 min )

Die Tuya-Plattform bietet Hunderttausende Geräte für die unterschiedlichsten Einsatzzwecke. Damit sind umfangreiche Automatisierungen mit nur einer App möglich.  ( 9 min )

Pi-Hole blockt Malware, Werbung und alles was sonst noch nervt im Netz. c't 3003 hat die Raspi-Software auf Herz und Nieren getestet.  ( 10 min )

Apple hat die Windows-Version seines Medienmanagement-Tools aktualisiert. Die Sicherheitslücken wurden bislang noch nicht ausgenutzt, heißt es.  ( 3 min )

Die Kameras sollen einem Bericht zufolge die Mimik des Trägers für lebensechte Avatare erfassen. Ex-Chefdesigner Jony Ive sei weiter an dem Projekt beteiligt.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Django, WildFly, Korifi, Jetstack, Camel, Bootstrap, Kalix und PAPPL.  ( 4 min )

Eine Tochter der Linux Foundation hostet CDEvents, ein Projekt zur herstellerneutralen Spezifizierung des Formats von Eventdaten.  ( 4 min )

Die App "FairEmail" ist nicht mehr im Google Play Store verfügbar, der Entwickler erklärte das Projekt für beendet. Die App bleibt aber weiterhin nutzbar.  ( 3 min )

Neben einem frei gestaltbaren Rückgabewert der main-Funktion bietet das Release Erweiterungen bei konstanten Funktionen.  ( 5 min )

Nvidias erste 30er-Grafikkarte seit der GT 1030 von 2017 soll bald erscheinen und jetzt auch ein "X" erhalten – Gerüchte sprechen von der GeForce GTX 1630.  ( 4 min )

Bereits Ende 2021 wurden die Server der Telekom-Cloud umgestellt. Während Windows-Nutzer eine neue Software erhalten haben, schauen Mac-Besitzer in die Röhre.  ( 4 min )

Der Hochschulzertifikatskurs über das Datenschutzmanagement qualifiziert Teilnehmende zum Datenschutzbeauftragten. Am 23. Mai gibt es einen Infoabend.  ( 3 min )

Das an TLS orientierte PSP Security Protocol für Datacenter-Traffic ist frei verfügbar. PSP setzt beim Verschlüsseln auf skalierbare Hardwareauslagerung.  ( 4 min )

Die neue Version ändert den Standardmodus des Type-Checking, entfernt instabile APIs und stellt den Deno Namespace standardmäßig für Web Worker bereit.  ( 4 min )

Mit der App können PHP-Entwickler Code direkt in einer lokalen oder über eine SSH eingebundene Anwendung ausführen. Es gibt sie für Mac, Windows und Linux.  ( 4 min )

Eine afrikanische Zentralbank trollt offenbar eine Ransomware-Gang.  ( 3 min )

Alle zehn Jahre ist es so weit. Die Schäfchen müssen gezählt werden. Testen Sie in diesem Quiz Ihr Wissen zum diesjährigen Zensus.  ( 3 min )

Noch vor einem Jahr beschuldigten sich Elastic und Amazon aufs Heftigste. Alles vergeben: Nun feiern sie eine für beide Seiten profitable Partnerschaft.  ( 3 min )

Sicherheitsforscher treffen sich in Vancouver, hacken sich durch populäre Anwendungen und Betriebssysteme – und streichen Geldprämien ein.  ( 4 min )

Apples Programmierlernwerkzeug für iPad und Mac bekommt in Version 4.1 eine Reihe von neuen Profi-Features. So können etwa externe Pakete eingebunden werden.  ( 3 min )

Neben der neu eingeführten SQL-Anweisung erweitert die Open-Source-Datenbank die JSON/SQL-Funktionen und das Komprimieren von Backups.  ( 4 min )

Apples neuer Abodienst kombiniert Geräteverwaltung, Cloud-Speicherplatz und Support. Das Live-Webinar macht Firmen am 25. Mai mit den Details vertraut.  ( 3 min )

Beim RIPE84-Treffen gab es viel Anerkennung dafür, wie Netzwerker in der Ukraine ihr Netz behüten. Ein großer Vorteil ist die ausgeprägte Dezentralität.  ( 5 min )

In der Antwort auf einen offenen Brief von zahlreichen Profis heißt es, man wolle künftig stärker auf die Branche hören und die App besser bewerben. Reicht das?  ( 4 min )

Es gibt ein wichtiges Sicherheitsupdate für BIND, welches Admins zeitnah installieren sollten.  ( 3 min )

Unternehmen können über WhatsApp Business mit ihren Kunden kommunizieren. Eine entsprechende WhatsApp Business Cloud API kündigte Mark Zuckerberg an.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. What you need to know the monkeypox outbreak The news: Monkeypox infections are spreading around the world, with 62 confirmed cases so far, and 55 suspected, according to a database compiled by researchers…  ( 4 min )

Google's Threat Analysis Group (TAG) on Thursday pointed fingers at a North Macedonian spyware developer named Cytrox for developing exploits against five zero-day (aka 0-day) flaws, four in Chrome and one in Android, to target Android users. "The 0-day exploits were used alongside n-day exploits as the developers took advantage of the time difference between when some critical bugs were patched  ( 4 min )

A Linux botnet malware known as XorDdos has witnessed a 254% surge in activity over the last six months, according to latest research from Microsoft. The trojan, so named for carrying out denial-of-service attacks on Linux systems and its use of XOR-based encryption for communications with its command-and-control (C2) server, is known to have been active since at least 2014. "XorDdos' modular  ( 3 min )

A case of software supply chain attack has been observed in the Rust programming language's crate registry that leveraged typosquatting techniques to publish a rogue library containing malware. Cybersecurity firm SentinelOne dubbed the attack "CrateDepression." Typosquatting attacks take place when an adversary mimics the name of a popular package on a public registry in hopes that developers  ( 3 min )

The North Korea-backed Lazarus Group has been observed leveraging the Log4Shell vulnerability in VMware Horizon servers to deploy the NukeSped (aka Manuscrypt) implant against targets located in its southern counterpart. "The attacker used the Log4j vulnerability on VMware Horizon products that were not applied with the security patch," AhnLab Security Emergency Response Center (ASEC) said in a  ( 3 min )

Fraudulent domains masquerading as Microsoft's Windows 11 download portal are attempting to trick users into deploying trojanized installation files to infect systems with the Vidar information stealer malware. "The spoofed sites were created to distribute malicious ISO files which lead to a Vidar info-stealer infection on the endpoint," Zscaler said in a report. "These variants of Vidar malware  ( 3 min )

Taiwanese network-attached storage (NAS) devices maker QNAP on Thursday warned its customers of a fresh wave of DeadBolt ransomware attacks. The intrusions are said to have targeted TS-x51 series and TS-x53 series appliances running on QTS 4.3.6 and QTS 4.4.1, according to its product security incident response team.  "QNAP urges all NAS users to check and update QTS to the latest version as  ( 2 min )

In this article, we will see step-by-step how you can get the best of customization with easy admin by using Ghost as a headless CMS for a Gatsby static site — everything for free.  ( 15 min )

Es gibt ein wichtiges Sicherheitsupdate für BIND, welches Admins zeitnah installieren sollten.  ( 3 min )

Microsoft has released emergency out-of-band (OOB) updates to address Active Directory (AD) authentication issues after installing Windows Updates issued during the May 2022 Patch Tuesday on domain controllers. [...]  ( 3 min )

Publishing giant Nikkei disclosed that the group's headquarters in Singapore was hit by a ransomware attack almost one week ago, on May 13th. [...]  ( 3 min )

A stealthy and modular malware used to hack into Linux devices and build a DDoS botnet has seen a massive 254% increase in activity during the last six months, as Microsoft revealed today. [...]  ( 3 min )

The U.S. Department of Justice (DOJ) has announced a revision of its policy on how federal prosecutors should charge violations of the Computer Fraud and Abuse Act (CFAA), carving out "good-fath" security research from being prosecuted. [...]  ( 5 min )

The North Korean hacking group known as Lazarus is exploiting the Log4J remote code execution vulnerability to inject backdoors that fetch information-stealing payloads on VMware Horizon servers. [...]  ( 4 min )

Phishing attacks are now using automated chatbots to guide visitors through the process of handing over their login credentials to threat actors. [...]  ( 5 min )

During the first day of Pwn2Own Vancouver 2022, contestants won $800,000 after successfully exploiting 16 zero-day bugs to hack multiple products, including Microsoft's Windows 11 operating system and the Teams communication platform. [...]  ( 4 min )

Taiwan-based network-attached storage (NAS) maker QNAP warned customers on Thursday to secure their devices against attacks pushing DeadBolt ransomware payloads. [...]  ( 4 min )

Security researchers are warning that external remote access services continue to be the main vector for ransomware gangs to breach company networks. [...]  ( 5 min )

Microsoft has released the first ISO image for the new Windows 11 Preview builds in the Dev channel, allowing Windows Insiders to perform clean installs of the operating system. [...]  ( 3 min )

Swiss banks cough up around half of the proceeds of crime The US government has recovered over $15 million in proceeds from the 3ve digital advertising fraud operation that cost businesses more than $29 million for ads that were never viewed.…  ( 8 min )

Running ad auctions while also buying and selling ads may be outlawed for large firms A bipartisan group of US lawmakers has proposed legislation that would likely force Alphabet's Google, Meta's Facebook, and Amazon to divest portions of their ad businesses.…  ( 8 min )

Cupertino's 51% control is why NA market grew while the world shrunk, says Canalys Smartphone markets the world over are in decline, but that news doesn't appear to have reached North America, where the market grew by 4 percent in the first quarter of 2022.…  ( 8 min )

With few options, Russia will look to half-fast chips from Chinese maker With Russia cut off from foreign processor makers Intel and AMD, the country has been scrambling to switch to more local CPUs and components.…  ( 8 min )

MS's TPM tip finally gets a grip – but shh – don't mention the Chromebooks You can imagine the sighs of relief all round in Redmond, Washington this week as Acer launched its new TravelMate range, which has Microsoft's Pluton silicon built-in.…  ( 8 min )

Working to compete with Intel as FastConnect comes to AMD-processor-powered PCs AMD and Qualcomm have rolled out a joint effort that brings remote management capabilities over Wi-Fi for AMD business systems, potentially boosting their appeal for corporate IT departments.…  ( 7 min )

CDN biz hopes merger will add a new way to use its edge services Content delivery network Fastly is purchasing Glitch, the company behind the web-based IDE of the same name.…  ( 8 min )

If you're on Windows 10, and meet requirements, it's ready to rumble... and 22H2 is waiting in the wings Microsoft has quietly updated its release health dashboard and declared Windows 11 "designated for broad deployment."…  ( 7 min )

Just because companies are publicly decreasing carbon footprints doesn't mean their cash isn't doing the opposite Many large corporations are taking measures to reduce their carbon footprints, but a new report claims that for some, the greatest source of emissions is actually from investments being made with their wealth, and this is undermining their own environmental efforts.…  ( 9 min )

They're using the invasion 'to take aim at the usual adversaries,' Mandiant told The Reg Pro-Beijing and Iran miscreants are using the war in Ukraine to spread disinformation that supports these countries' political interests — namely, advancing anti-Western narratives – according to threat-intel experts at Mandiant.…  ( 10 min )

Attempt to be interactive meets cries of 'Someone dumped a text box right in the center of my desktop!' Microsoft has rolled out an Insider Build threatening "interactive content on the Windows desktop."…  ( 7 min )

Share price collapses 19% as COVID-19 policy hits supply chain Cisco Systems surprised Wall Street by warning investors that the Shanghai lockdown and the war in Ukraine will eradicate any revenue growth prospects in its current – and final – quarter of 2022.…  ( 8 min )

So that's who to blame when its IT crashes, huh? American Airlines named Microsoft Azure its preferred cloud platform this week in a deal it says will cut costs, boost efficiency, and support its eco-sustainability goals.…  ( 7 min )

At the Haba, go, go Habana. The hottest research north of Havana The University of San Diego Supercomputer Center (SDSC) says it's ready to run test workloads on its experimental Voyager AI system, which looks to be the first-ever Intel Habana-based supercomputer.…  ( 8 min )

Singapore issues injunction against the sale of image procured through questionable foreclosure For the first time, a court has issued an injunction to stop the sale and transfer of a non-fungible token (NFT) at the request of a previous owner.…  ( 7 min )

Crew's raids continue worldwide, Talos team warns The US government's alert three months ago warning businesses and government agencies about the threat of BlackByte has apparently done little to slow down the ransomware group's activities.…  ( 9 min )

Tech exploits electromagnetically induced transparency to form highly sensitive electric field detector Brit telecoms giant BT is undertaking a trial of new antenna technology that may boost the range of 5G networks and reduce mobile network energy consumption.…  ( 8 min )

For tiny Venn diagram wedge who want the feel of a mechanical keyboard plus, er, emoji keys So many mechanical keyboards put function ahead of form. Put less charitably, they're ugly as sin. The Logitech Pop, a $100 wireless mechanical keyboard, tries to play both sides of the field.…  ( 9 min )

No 'reportable concerns' yet plenty of concerned feedback As Google's self-imposed "late 2023" deadline to kill all third party cookies in its Chrome browser looms, the giant has handed in its first quarterly Privacy Sandbox report to the UK's competition regulator.…  ( 7 min )

Miners behind the Great Firewall may never have downed tools, say Cambridge crypto-boffins China has become the world’s second most prolific miner of bitcoin – or maybe it always was – according to new data from the Cambridge Centre for Alternative Finance (CCAF).…  ( 7 min )

British startup Wayve gets supercomputing leg up Microsoft is pumping supercomputing oomph as well as funds into a British-born autonomous vehicle startup.…  ( 7 min )

Engineers debugging at 160 bits per second, with 41 hours latency NASA engineers are investigating anomalous telemetry data produced by venerable space probe Voyager 1.…  ( 7 min )

No, you're not really gonna be hacked. But you may be surprised Some research into the potentially exploitable low-power state of iPhones has sparked headlines this week.…  ( 9 min )

Well short of planned 70 percent domestic capacity China’s integrated circuit (IC) production has failed to keep pace with its appetite for silicon, with market research firm IC Insights predcicting the nation will produce only one in five ICs it uses in 2026.…  ( 7 min )

Cutting costs across sprawling business as COVID makes life hard in China Chinese tech giant Tencent has recorded its first ever quarter-to-quarter revenue fall, warned that COVID-19 lockdowns will hurt messing with its business, and cautioned against assumptions that Beijing is ready to enthusiastically support tech companies.…  ( 8 min )

We're shutting down as we can no longer pay staff, bills, web giant says Google Russia is shutting down and filing for bankruptcy after Vladimir Putin's government confiscated the Chocolate Factory's bank account in the nation.…  ( 7 min )

Critical authentication bypass revealed, older flaws under active attack Uncle Sam's Cybersecurity and Infrastructure Security Agency (CISA) has issued two warnings in a single day to VMware users, as it believes the virtualization giant's products can be exploited by miscreants to gain control of systems.…  ( 8 min )

Foreign workers favored over US residents because that's what clients wanted, allegedly Amtex Systems Incorporated, an IT staffing and recruiting firm based in New York City, has agreed to settle claims it discriminated against American workers because company clients wanted workers with temporary visas.…  ( 8 min )

A sneak peek at a notebook that could be revealed this year Pic  As Apple and Qualcomm push for more Arm adoption in the notebook space, we have come across a photo of what could become one of the world's first laptops to use the open-source RISC-V instruction set architecture.…  ( 8 min )

Biz tells us: Won't someone please think of the ... fraud we've stopped Democrat senators want the FTC to investigate "evidence of deceptive statements" made by ID.me regarding the facial-recognition technology it controversially built for Uncle Sam.…  ( 9 min )

A novel Bluetooth relay attack can let cybercriminals more easily than ever remotely unlock and operate cars, break open residential smart locks, and breach secure areas. The vulnerability has to do with weaknesses in the current implementation of Bluetooth Low Energy (BLE), a wireless technology used for authenticating Bluetooth devices that are physically located within a close range. <!-  ( 3 min )

The 2022 SaaS Security Survey Report, in collaboration with CSA, examines the state of SaaS security as seen in the eyes of CISOs and security professionals in today's enterprises. The report gathers anonymous responses from 340 CSA members to examine not only the growing risks in SaaS security but also how different organizations are currently working to secure themselves. Demographics The  ( 5 min )

Google last month addressed a high-severity flaw in its OAuth client library for Java that could be abused by a malicious actor with a compromised token to deploy arbitrary payloads. Tracked as CVE-2021-22573, the vulnerability is rated 8.7 out of 10 for severity and relates to an authentication bypass in the library that stems from an improper verification of the cryptographic signature.  ( 3 min )

A new research published by academics from KU Leuven, Radboud University, and the University of Lausanne has revealed that users' email addresses are exfiltrated to tracking, marketing, and analytics domains before such is submitted and without prior consent. The study involved crawling 2.8 million pages from the top 100 websites, and found that as many as 1,844 websites allowed trackers to  ( 3 min )

VMware has issued patches to contain two security flaws impacting Workspace ONE Access, Identity Manager, and vRealize Automation that could be exploited to backdoor enterprise networks. The first of the two flaws, tracked as CVE-2022-22972 (CVSS score: 9.8), concerns an authentication bypass that could enable an actor with network access to the UI to gain administrative access without prior  ( 3 min )

Die Bibliothek zum Erstellen von Benutzeroberflächen bringt einen veränderten Umgang mit Stores und Streaming.  ( 4 min )

Hewlett Packard Enterprise baut die Server für europäische Supercomputer künftig in der Tschechischen Republik zusammen – HPEs vierter Standort dieser Art.  ( 3 min )

Der Edge-Cloud-Anbieter Fastly erwirbt mit Glitch eine Plattform, die rund 1,8 Millionen Entwickler zum Erstellen von Full-Stack-Webapplikationen nutzen.  ( 4 min )

Release 3.2.0 von Apache Kafka stellt die Zugriffskontrolllisten um und hat ein integriertes Autorisierungswerkzeug für den Betrieb des Clusters an Bord.  ( 4 min )

Eine Keynote der Entwicklerkonferenz in Karlsruhe beschäftigt sich mit Weltmodellen und Symoblic Reasoning, die andere widmet sich AD-Systemen.  ( 4 min )

Veeam beleuchtet die Auswirkungen von Ransomware-Angriffen: 76 Prozent der Unternehmen geben an, gezahlt zu haben, um ihre Daten wiederzuerlangen.  ( 4 min )

Mit Red Hat Enterprise Linux 9 stehen für die Enterprise-Distribution einige grundlegende Änderungen an. Was bedeuten sie für die Arbeit der Administratoren?  ( 8 min )

Meta hat offenbar einen Einstellungsstopp für mehrere Geschäftsbereiche verhängt. Betroffen seien auch die Teams von Facebook Gaming und Messenger Kids.  ( 3 min )

Knapp einen Monat nach dem Start der "Umsehen"-Funktion hat Apple seinen Street-View-Dienst jetzt erweitert. Weitere Städte in Deutschland sollen folgen.  ( 3 min )

Auch viele Softwareentwickler wollen lieber weiter im Homeoffice arbeiten. Mit den richtigen Methoden und Werkzeugen klappt das – die neue iX stellt sie vor.  ( 5 min )

Einen Monat nach Veröffentlichung des KI-Systems, das Bilder anhand von Beschreibungen erstellt, zieht OpenAI Bilanz und will weiteren Usern Zugriff gewähren.  ( 5 min )

In den Zugangssicherungsgeräten der SMA-100-Reihe von Sonicwall könnten Nutzer eigene Befehle als root ausführen. Ein Firmware-Update steht bereit.  ( 3 min )

Microsofts Sicherheitsteams warnen vor Angriffen auf MSSQL, die nach initialem Einbruch nicht mehr Powershell zur weiteren Ausbreitung nutzen.  ( 3 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Die Episode führt den Architekturentwurf für die Beispielaufgabe fort.  ( 3 min )

In seinem neuen Buch verrät "iPod-Vater" Tony Fadell Anekdoten und Geschichten aus seiner Apple-Zeit. Einige davon sind überraschend.  ( 4 min )

Der Hersteller Qnap warnt vor neuen Angriffen mit Ransomware auf die Netzwerkspeicher des Unternehmens. Admins sollen bereitstehende Updates zügig installieren.  ( 3 min )

Mit dem Theme-Builder Jupiter Theme oder Jupiter X Core Plugin erstellte WordPress-Websites sind verwundbar.  ( 3 min )

Die chinesische Großstadt Shanghai steckt immer noch im Lockdown fest. Apple-Monteur Quanta erwägt deshalb, die Herstellung zu verlagern.  ( 4 min )

Ein Schnelleinstieg in Python für alle, die bereits Programmierkenntnisse in einer anderen Sprache haben. Online-Schulung an drei Tagen; noch Plätze frei.  ( 3 min )

Parallel zum finalen Hacking-Wettbewerb für junge Menschen wird es in München eine Ausgabe der Fachkonferenz und Recruiting-Messe IT Job kompakt geben.  ( 3 min )

Die US-amerikanische CISA warnt vor Angriffen auf mehrere Sicherheitslücken in VMware-Produkten. VMware dichtet zudem neu entdeckte Schwachstellen ab.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann noch bis Sonntag beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Don’t you hate it when you load a website or web app, some content displays and then some images load — causing content to shift around? That’s called content reflow and can lead to an incredibly annoying user experience for … Inline Image Previews with Sharp, BlurHash, and Lambda Functions originally published on CSS-Tricks. You should get the newsletter.  ( 7 min )

The world is rapidly moving from human-directed manufacturing using computerized assembly lines to largely automated smart factories that manufacture more efficiently using real-time data. Considered by many to be the fourth industrial revolution, or “Industry 4.0,” this transformation requires a bevy of technologies to deliver on its promise of ultra-reliable low-latency communications (URLLC). From smart devices…  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Why China is still obsessed with disinfecting everything In a one-minute video that went viral in China in early May, three government workers in hazmat suits spray disinfectant all over someone’s home: inside…  ( 4 min )

In a one-minute video that went viral in China in early May, three government workers in hazmat suits spray disinfectant all over someone’s home: inside the fridge, under the television, over the couch. On social media, Chinese people worried about whether their home would experience the same treatment if they were unlucky enough to catch…  ( 6 min )

In this article, Benjamin Ajibade introduces Kubernetes to front-end engineers and explaines why Kubernetes is integral in a production-ready microservice architecture. Some key terms that are important for team collaboration will be discussed and conclude the post with a quick deployment to getting started as a beginner.  ( 10 min )

In den Zugangssicherungsgeräten der SMA-100-Reihe von Sonicwall könnten Nutzer eigene Befehle als root ausführen. Ein Firmware-Update steht bereit.  ( 3 min )

Der Hersteller Qnap warnt vor neuen Angriffen mit Ransomware auf die Netzwerkspeicher des Unternehmens. Admins sollen bereitstehende Updates zügig installieren.  ( 3 min )

Mit dem Theme-Builder Jupiter Theme oder Jupiter X Core Plugin erstellte WordPress-Websites sind verwundbar.  ( 3 min )

Die US-amerikanische CISA warnt vor Angriffen auf mehrere Sicherheitslücken in VMware-Produkten. VMware dichtet zudem neu entdeckte Schwachstellen ab.  ( 3 min )

The Spanish police have announced the arrest of 13 people and the launch of investigations on another 7 for their participation in a phishing ring that defrauded at least 146 people. [...]  ( 3 min )

WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. [...]  ( 3 min )

After suffering a ransomware attack by the Hive operation, the Bank of Zambia made it clear that they were not going to pay by posting a picture of male genitalia and telling the hackers to s… (well, you can use your imagination). [...]  ( 5 min )

The US government has recovered over $15 million from Swiss bank accounts belonging to operators behind the '3ve' online advertising fraud scheme. [...]  ( 3 min )

The Department of Homeland Security's cybersecurity unit ordered Federal Civilian Executive Branch (FCEB) agencies today to urgently update or remove VMware products from their networks by Monday due to an increased risk of attacks. [...]  ( 3 min )

A previously unknown Chinese hacking group known as 'Space Pirates' targets enterprises in the Russian aerospace industry with phishing emails to install novel malware on their systems. [...]  ( 4 min )

VMware warned customers today to immediately patch a critical authentication bypass vulnerability "affecting local domain users" in multiple products that can be exploited to obtain admin privileges. [...]  ( 3 min )

In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...]  ( 4 min )

Threat actors are luring potential thieves by spamming login credentials for other people account's on fake crypto trading sites, illustrating once again, that there is no honor among thieves. [...]  ( 4 min )

Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server (MSSQL) database servers using weak passwords. [...]  ( 3 min )

The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...]  ( 5 min )

The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...]  ( 5 min )

Russia-linked crime-as-a-service crew is rich, professional – and investing in R&D Analysis  Wizard Spider, the Russia-linked crew behind high-profile malware Conti, Ryuk and Trickbot, has grown over the past five years into a multimillion-dollar organization that has built a corporate-like operating model, a year-long study has found.…  ( 9 min )

Everyone's entitled to a viewpoint but what's your viewpoint on what exactly is and isn't a viewpoint? A coalition of advocacy groups on Tuesday asked the US Supreme Court to block Texas' social media law HB 20 after the US Fifth Circuit Court of Appeals last week lifted a preliminary injunction that had kept it from taking effect.…  ( 8 min )

FBI and co blow lid off latest PHP tampering scam The FBI and its friends have warned businesses of crooks scraping people's credit-card details from tampered payment pages on compromised websites.…  ( 8 min )

Rocky and Alma are here for those CentOS Linux users who are still smarting Red Hat Enterprise Linux 8.6, Alma Linux 8.6 and Rocky Linux 8.6 are all out now, for various platforms.…  ( 8 min )

Still no damages number, likely to be way less than $5 billion When an accounts assistant asked Autonomy founder Mike Lynch to approve a $700,000 purchase order in December 2010, the British exec "wrote 'ok' from his iPhone."…  ( 11 min )

OVHcloud and Nextcloud lawsuits hit the spot as Windows giant admits to potential competition issues Microsoft is offering a series of concessions over its software licensing policies to European cloud providers in a bid to address their accusations of anti-competitive tactics and cool any interest from local regulators.…  ( 9 min )

Less than half said business leaders in their bank understood 'opportunities of cloud' A report into cloud adoption in the international banking industry shows that despite a broad appetite for cloud services, only around a third of banks have migrated more than 30 percent of their applications.…  ( 8 min )

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.…  ( 10 min )

2 days a week still compulsory but U-turn gives credence to worker concerns Apple has postponed employees' scheduled return to the office for three days a week amid a jump in COVID-19 infections.…  ( 8 min )

Facility supports a flurry of HPC development, centered in the Czech Republic Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.…  ( 7 min )

After years of crackdowns, Beijing changing its tune on the industry The vice premier of China and Xi Jinping's economic right hand man, Liu He, has offered a rare show of support to China's tech industry – both domestic and abroad.…  ( 7 min )

Chip biz bets interconnect tech will cement its cloud claim, one day Fresh off the heels of Marvell Technology's Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.…  ( 9 min )

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.…  ( 8 min )

According to this cybersecurity outfit that wants your business, anyway The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.…  ( 9 min )

French frolics for Chromium browser on Android Automotive Browser-maker Vivaldi has added Renault to the list of users for the Android Automotive OS version of its eponymous web renderer.…  ( 8 min )

Sysrv-K malware infects unpatched tin, Microsoft warns The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.…  ( 9 min )

Puny human brains baffled by K8s complexity, leading to blunder fears Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.…  ( 9 min )

Tax portal wobbles, again Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India's government continuing to pressure it over labor practices.…  ( 8 min )

Phew! Google has quietly dropped its demand that users of its free G Suite legacy edition cough up to continue enjoying custom email domains and cloudy productivity tools.…  ( 7 min )

MIPS...ish is on the march in the Middle Kingdom Version 12.1 of the GNU Compiler Collection (GCC) was released this month, and among its many changes is support for China's LoongArch processor architecture.…  ( 8 min )

CEO of e-tail market leader JD perhaps boldly points out wider economic impact of zero-virus stance The CEO of China’s top e-commerce company, JD, has pointed out the economic impact of China’s current COVID-19 lockdowns - and the news is not good.…  ( 8 min )

Can't say when, where, nor price tag. Has promised 40k wafers a month at between 28nm and 40nm Taiwanese contract manufacturer to the stars Foxconn is to build a chip fabrication plant in Malaysia.…  ( 7 min )

The little lander that couldn't (any longer) The Martian InSight lander will no longer be able to function within months as dust continues to pile up on its solar panels, starving it of energy, NASA reported on Tuesday.…  ( 9 min )

With the benefit of maybe revitalizing the x86 giant’s foundry business Analysis  Here's something that would have seemed outlandish only a few years ago: to help fuel Intel's future growth, the x86 giant has vowed to do what it can to make the open-source RISC-V ISA worthy of widespread adoption.…  ( 10 min )

Looking for tech talent? Kim Jong-un's friendly freelancers, at your service Pay close attention to that resume before offering that work contract.…  ( 8 min )

A stunning surprise to no one in this Solar System Elon Musk said his bid to acquire and privatize Twitter "cannot move forward" until the social network proves its claim that fake bot accounts make up less than five per cent of all users.…  ( 8 min )

Von Parkplatzüberwachung bis zur Baustellenerfassung: Mit dem energiesparenden IoT-Funk will Netcologne die Digitalisierung in der Stadt Köln voranbringen.  ( 4 min )

Auf einem abgeschalteten iPhone kann Malware laufen, warnt ein Forschungsteam der TU Darmstadt. Apples Low-Power-Mode fehlen Schutzvorkehrungen.  ( 4 min )

Bei einem Cyberangriff auf die TU Berlin kam es im vergangenen Jahr zu monatelangen IT-Ausfällen. Hunderte Dateien mit vertraulichen Inhalten wurden gestohlen.  ( 4 min )

Das auf IT-Sicherheit spezialisierte Unternehmen Secunet aus Essen kauft den Berliner Cloud-Anbieter SysEleven für 50 Millionen Euro.  ( 3 min )

Internationale IT-Sicherheitsbehörden listen die am häufigsten missbrauchten Fehler bei der Umsetzung von IT-Sicherheit. Sie benennen aber auch Lösungen.  ( 4 min )

Das quelloffene Vektorgrafikprogramm Inkspace ist in der Version 1.2 verfügbar. Mit der neuen Version lassen sich auch mehrseitige Dokumente gestalten.  ( 3 min )

Red Hat hat die Sicherheit rund um Kubernetes unter die Lupe genommen: 93 Prozent der Befragten hatten im vergangenen Jahr mindestens einen Security-Vorfall.  ( 4 min )

Der neue Service Assured Open Source Software liefert Pakete, die Google ausgiebig getestet hat und im eigenen Entwicklungsprozess verwendet.  ( 4 min )

Git-Hoster und CI/CD-Anbieter GitLab gibt eine Funktion für kostenlose Accounts frei, mit der Änderungen an einem Repo schneller in einem Cluster ankommen.  ( 3 min )

Der E-Mail-Service-Provider Posteo hat seit Dienstag verstärkt mit Distributed-Denial-of-Service-Attacken zu kämpfen. Technische Maßnahmen wurden getroffen.  ( 3 min )

Ab sofort lässt sich das neue Outlook auch offiziell testen. Auch wenn manche Produktivitätsexperten davon abraten, sollen E-Mails nun den Tag strukturieren.  ( 4 min )

Das TestRail-Team hat ein CLI-Werkzeug vorgestellt, mit dem automatisierte Testergebnisse direkt aus der Kommandozeile an TestRail geschickt werden können.  ( 4 min )

Der neue RFC der Internet Engineering Task Force nutzt die integrierte Verschlüsselung und bessere Geschwindigkeit von QUIC für die Namensauflösung.  ( 5 min )

Das Sonderheft "c't Sicher ins Netz" liefert jede Menge Tipps und Rüstzeug für geschützte, entspannte und Privatsphäre-wahrende Reisen durchs Internet.  ( 4 min )

Die Keras-Library bekommt zusätzliche ResNet-Modelle und flexiblere Optimizer. Die schlanke Lite-Variante kennt zusätzliche Datentypen und Operationen.  ( 4 min )

Eine Sicherheitslücke im WordPress-Plug-in Tatsu Builder erlaubt Angreifern, Schadcode einzuschleusen. Derzeit werden massive Angriffe darauf beobachtet.  ( 3 min )

Die KubeCon EU 2022 hat in Valencia begonnen. Open-Source-Projekte und Firmen aus dem Cloud-Umfeld stellen bis zum 20. Mai ihre Software vor.  ( 4 min )

Die Software Freedom Conservancy streitet mit TV-Anbieter Vizio wegen GPL-Lizenzverstößen: Ein Präzedenzfall für die Open-Source-Rechtsprechung bahnt sich an.  ( 8 min )

Die Apple Business Essentials waren bislang strikt auf Apples Anwendungsverteilsystem ausgerichtet. Das ändert sich nun glücklicherweise.  ( 4 min )

Berechnen Nvidia-Grafikkarten von Angreifern präparierte Shader, kann es zu Sicherheitsproblemen kommen.  ( 3 min )

Aus den eigenen Unternehmensdaten mit den Tools des Elastic Stack Erkenntnisse ziehen. Dreitägige Online-Schulung für Kurzentschlossene vom 23. bis zum 25. Mai.  ( 3 min )

Der Zahlungsdienstleister Mastercard will mit rein biometrischer Authentifizierung eine "neue Ära" des Bezahlens einläuten – mit einem "Winken" oder "Lächeln".  ( 4 min )

Microsoft stellt die Unterstützung für die Windows-Versionen Server und Windows 10 20H2 ein. Windows Server gibt es künftig nicht mehr als Halbjahres-Releases.  ( 4 min )

Zwei SUSEaner erklären, welche Tools die global verteilten Teams für die virtuelle Kommunikation nutzen – und warum auch persönliche Treffen ihre Vorzüge haben.  ( 5 min )

Sicherheitsmängel in Bluetooth Low Energy erlauben Zugriff auf Teslas Elektroautos, andere elektronische Geräte und Türschlösser. Tesla bestätigt das Problem.  ( 4 min )

The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations. "Most of Wizard Spider's efforts go into hacking European and U.S. businesses, with a special cracking tool used by some of their attackers to breach high-value targets," Swiss cybersecurity company PRODAFT said in a new report shared with The  ( 3 min )

Ransomware is not a new attack vector. In fact, the first malware of its kind appeared more than 30 years ago and was distributed via 5.25-inch floppy disks. To pay the ransom, the victim had to mail money to a P.O. Box in Panama. Fast forward to today, affordable ransomware-as-a-service (RaaS) kits are available on the dark web for anyone to purchase and deploy and attackers have an infinite  ( 5 min )

To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that demand is through the roof. 69% of organizations plan to boost spending on cybersecurity in 2022.  The bad news is that everyone wants a piece of the pie. MSSPs must outshine each other while fending off encroachments by traditional IT  ( 3 min )

Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised systems. The intrusions, which leverage brute-force attacks as an initial compromise vector, stand out for their use of the utility "sqlps.exe," the tech giant said in a series of tweets. The ultimate goals of the  ( 3 min )

Highly skilled software and mobile app developers from the Democratic People's Republic of Korea (DPRK) are posing as "non-DPRK nationals" in hopes of landing freelance employment in an attempt to enable the regime's malicious cyber intrusions. That's according to a joint advisory from the U.S. Department of State, the Department of the Treasury, and the Federal Bureau of Investigation (FBI)  ( 3 min )

Microsoft is warning of an emerging threat targeting internet-connected cryptocurrency wallets, signaling a departure in the use of digital coins in cyberattacks. The tech giant dubbed the new threat "cryware," with the attacks resulting in the irreversible theft of virtual currencies by means of fraudulent transfers to an adversary-controlled wallet. "Cryware are information stealers that  ( 3 min )

The notorious Conti ransomware gang, which last month staged an attack on Costa Rican administrative systems, has threatened to "overthrow" the new government of the country. "We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power," the group said on its official website. "We have our insiders in your government. We are also  ( 3 min )

I was fortunate last year to get approached by Shawn Wang (swyx) about doing some work for Temporal. The idea was to cast my creative eye over what was on the site and come up with some … An Interactive Starry Backdrop for Content originally published on CSS-Tricks. You should get the newsletter.  ( 10 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The baby formula shortage has birthed a shady online marketplace Across the United States, parents are scrambling to find baby formula amid a nationwide shortage. To non-parents, the shortage may seem sudden, but…  ( 4 min )

Money is weird now. When we were settling in on the theme for our May/June issue, I decided to buy an NFT of an Olive Garden for my friend Katie, who really loves Olive Garden. It was also an attempt to try to better understand NFTs. Each of the “Non-Fungible Olive Gardens,” really just a…  ( 3 min )

Solar panels are basically synonymous with silicon. The material is used in about 95% of the panels in today’s market. But silicon solar cells are limited in how much energy they can harness from the sun, and they are still relatively expensive to make.  For many, compounds called perovskites have long held promise as potentially…  ( 4 min )

After Ashley Diaz had her baby in early April, she faced a setback. She wasn’t producing enough breast milk. Her newborn son needed formula to supplement his nutrition. So she sent her mother to Target to stock up. She came back with only two boxes—the maximum allowed. Now, many of those store shelves are empty,…  ( 5 min )

Eine Sicherheitslücke im WordPress-Plug-in Tatsu Builder erlaubt Angreifern, Schadcode einzuschleusen. Derzeit werden massive Angriffe darauf beobachtet.  ( 3 min )

Berechnen Nvidia-Grafikkarten von Angreifern präparierte Shader, kann es zu Sicherheitsproblemen kommen.  ( 3 min )

'We're open to all hypotheses, we're open to any conclusions' says official A US House of Representatives subcommittee on Tuesday heard from Pentagon officials on reports of and investigations into unidentified aerial phenomena (UAP) – a category that encompasses unidentified flying objects (UFO) and saves room for optical illusions, lens flare, smudges in photos, and other possibilities like meteorological events.…  ( 10 min )

* Terms, conditions, hardware specs and software may vary – a lot As a slowdown in PC sales brings down prices for graphics cards, AMD is hoping to win over the market's remaining buyers with a bold, new claim that its latest Radeon cards provide better performance for the dollar than Nvidia's most recent GeForce cards.…  ( 9 min )

A futuristic design won't make people want to come back – just ask Apple After nearly a decade of planning and five years of construction, Google is cutting the ribbon on its Bay View campus, the first that Google itself designed.…  ( 8 min )

Anything that uses proximity-based BLE is vulnerable, claim researchers Tesla Model 3 and Y owners, beware: the passive entry feature on your vehicle could potentially be fooled by a new form of relay attack.…  ( 8 min )

Java and Python packages are the first on the list Google has a plan — and a new product plus a partnership with developer-focused security shop Snyk — that attempts to make it easier for enterprises to secure their open source software dependencies.…  ( 8 min )

Mission to lunar orbit is further than any Photon satellite bus has gone before Rocket Lab has taken delivery of NASA's CAPSTONE spacecraft at its New Zealand launch pad ahead of a mission to the Moon.…  ( 7 min )

More Euro-presence than any other Chinese company, but still nowhere near Google or AWS Alibaba has pulled ahead of its Chinese rivals in Europe with the opening of a third datacenter in Germany.…  ( 7 min )

Still a 'nimble idea factory' under the gaze of the Chameleon Kubecon  SUSE acquisition Rancher is growing up, with a decidedly enterprise-friendly 2.6.5 release and version 5.0 of NeuVector.…  ( 7 min )

Pain points plugged in open-source vector art package Open-source vector drawing package Inkscape has resolved at least one user pain point with v1.2 – multiple-page documents.…  ( 7 min )

PostgreSQL, MongoDB, MySQL tools for overly busy DBAs, less experienced devs Percona Live  Open-source database services biz Percona has confirmed general availability of a database management platform initially targeted at PostgreSQL, MySQL, and MongoDB.…  ( 8 min )

Investors want compensation-performance link, but manufacturing plan will dent bottom line Intel shareholders voted to reject the compensation packages for the chipmaker's top execs, according to regulatory documents filed with the Securities and Exchange Commission (SEC), although the vote was non-binding on the company.…  ( 7 min )

Go host yourself with a tiny low-powered Arm cluster in a box for $219 The Turing Pi 2 crowdfunding campaign has soared past its $64,000 goal in single a day, currently standing at $1,027,428 with more than 3,400 backers.…  ( 7 min )

Show us that benefits outweigh the cost, BCS challenges government BCS, The Chartered Institute for IT, has warned that proposed changes to Britain's data protection rules must not put the flow of data between the EU and the UK at risk.…  ( 7 min )

It should just run like x86, pair basically stress Arm is this week celebrating passing a few of its own self-set milestones in its long quest to compete against x86 stalwarts Intel and AMD in the server processor space.…  ( 9 min )

You look like Windows, and you look like Windows and you look like Windows ... Analysis  As a mainstream desktop OS, Linux is doing better than ever. The Year of Linux on the Desktop came some time ago, and it's ChromeOS (Chromebooks were outselling Macs until recently). But there's a problem – there is almost no diversity of design.…  ( 14 min )

Singapore's safety scheme measures scam-combatting capability A newly implemented e-commerce rating system in the city-state of Singapore has rated Facebook's Marketplace as the least trustworthy e-commerce platform, behind Amazon and its Alibaba-owned Asian analogue Lazada.…  ( 8 min )

More types of biz fall under expanded rules – and fines for those who fall short Europe has moved closer toward new cybersecurity standards and reporting rules following a provisional network and information systems agreement dubbed NIS2 by the European Council and Parliament. …  ( 9 min )

The GSMA would say that, yet Big Tech is making it harder for carriers to turn a quid Telcos risk missing out on revenue needed to fund new networks, despite demand for their services soaring – and Big Tech is to blame.…  ( 9 min )

If his surgery was as bad as his opsec, this chap has caused a lot of trouble The US Attorney’s Office has charged a 55-year-old cardiologist with creating and selling ransomware and profiting from revenue-share agreements with criminals who deployed his product.…  ( 9 min )

'Brushing' tops the list, as quantity of forbidden content continue to rise China’s Ministry of Public Security has revealed the five most prevalent types of fraud perpetrated online or by phone.…  ( 8 min )

Appeal petition as doomed as the Itanic chips at the heart of decade-long drama The US Supreme Court on Monday declined to hear Oracle's appeal to overturn a ruling ordering the IT giant to pay $3 billion in damages for violating a decades-old contract agreement.…  ( 8 min )

Estimated $42bn vanished with collapse of UST, Luna – we explain what all this means TerraUSD, a so-called "stablecoin," has seen its value drop from $1 apiece a week ago to about $0.09 on Monday, demonstrating not all that much stability.…  ( 9 min )

Cloud biz says it is reacting to customer mix largely shifting from lone devs to SMBs DigitalOcean attempted to lessen the sting of higher prices this week by announcing a cut-rate instance aimed at developers and hobbyists.…  ( 9 min )

Fine-print crucially deemed contractual agreement as well as copyright license in smartTV source-code case The Software Freedom Conservancy (SFC) has won a significant legal victory in its ongoing effort to force Vizio to publish the source code of its SmartCast TV software, which is said to contain GPLv2 and LGPLv2.1 copyleft-licensed components.…  ( 11 min )

Citizen allegedly moved $10m-plus in BTC into banned nation US prosecutors have accused an American citizen of illegally funneling more than $10 million in Bitcoin into an economically sanctioned country.…  ( 8 min )

Microsoft has reminded customers today that Windows Server, version 20H2 will be reaching the end of service (EOS) on August 9, 2022. [...]  ( 3 min )

NVIDIA has released a security update for a wide range of graphics card models, addressing four high-severity and six medium-severity vulnerabilities in its GPU drivers. [...]  ( 4 min )

Microsoft says Defender for Endpoint now comes with a new 'troubleshooting mode' that will help Windows admins test Defender Antivirus performance and run compatibility scenarios without getting blocked by tamper protection. [...]  ( 4 min )

A joint security advisory issued by multiple national cybersecurity authorities revealed today the top 10 attack vectors most exploited by threat actors for breaching networks. [...]  ( 4 min )

Security researchers at the NCC Group have developed a tool to carry out a Bluetooth Low Energy (BLE) relay attack that bypasses all existing protections to authenticate on target devices. [...]  ( 5 min )

ISO 27001 may seem like a big undertaking, but the certification can pay off in more ways than one—including overlap with compliance regulations. Read about the benefits of ISO 27001 and how to get started. [...]  ( 5 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has added two more vulnerabilities to its list of actively exploited bugs, a code injection bug in the Spring Cloud Gateway library and a command injection flaw in Zyxel firmware for business firewalls and VPN devices. [...]  ( 3 min )

Hackers are massively exploiting a remote code execution vulnerability, CVE-2021-25094, in the Tatsu Builder plugin for WordPress, which is installed on about 100,000 websites. [...]  ( 3 min )

HTML files remain one of the most popular attachments used in phishing attacks for the first four months of 2022, showing that the technique remains effective against antispam engines and works well on the victims themselves. [...]  ( 4 min )

Die "E-Rezept-Enthusiasten" wollen das Rezept ins Ziel bringen: Dem Gesundheitswesen soll unter die Arme gegriffen und Patienten besser aufgeklärt werden.  ( 5 min )

Steckerfertige PV-Anlagen senken die Stromkosten mit Sonnenenergie. Laut VDE darf man sie nicht per Schuko anschließen – das wird sich vorerst nicht ändern.  ( 5 min )

Erst sollten alle Anwender zahlende Workspace-Kunden werden – nun können wenigstens Privatnutzer die G Suite doch für nichtkommerzielle Zwecke gratis einsetzen.  ( 3 min )

Ashton Kutcher und Quentin Tarantino sollen auf die Onlinemarketingkonferenz OMR locken. Zehntausende reden über Werbestrategien, Cookie-loses Tracking, NFTs.  ( 5 min )

Schon 24. Mai 2022 findet die neue Online-Konferenz zur Cross-Plattform-Entwicklung mit dem Flutter-Toolkit statt. Wer jetzt bucht, kann noch live dabei sein.  ( 3 min )

Red Hat bleibt seiner Community-Strategie treu: Wie beim Vorbild RHEL bekommt auch das Kubernetes-Sicherheits-Produkt RHACS zur KubeCon ein Open-Source-Pendant.  ( 3 min )

Live-Untertitel, Türerkennung, Apple Watch Mirroring und mehr: Apple nennt erste Funktionen, die Teil der Betriebssysteme iOS 16, macOS 13 und watchOS 9 werden.  ( 4 min )

Mit Arubas ClearPass Policy Manager können Administratoren die Zugangskontrolle regeln. Sicherheitslücken darin ermöglichen Angreifern die komplette Übernahme.  ( 4 min )

Abos in iOS-Apps können nun um bis zu 50 Prozent ohne Zustimmung des Nutzers verteuert werden. Mehrere Apple-Vorgaben sollen Missbrauch erschweren.  ( 4 min )

Das neue Release von awork führt unter anderem private Projekte ein und ermöglicht eine Automatisierung auf Projektebene.  ( 4 min )

Die pandemiebedingten Entwicklungen in den deutschen Büros sind nachhaltig, meint der Branchenverband Bitkom auf Basis einer aktuellen Umfrage.  ( 4 min )

Die integrierte Remotehilfe von Windows 10 und 11 erreicht jetzt ihr Support-Ende. Microsoft bietet im Store einen Ersatz an – und erregt die Gemüter.  ( 4 min )

Eine Woche nachdem Costa Rica den Cyber-Notstand ausgerufen hat, verschärft die Hackergruppe Conti die Drohungen. Sie wolle die Regierung stürzen.  ( 4 min )

SUSE baut seine Aktivitäten im Container-Umfeld aus. Rancher bekommt Sicherheitsfunktionen und das Projekt Open Zero Trust wird an die CNCF übergeben.  ( 3 min )

Die Software zum Planen und Verteilen von Workloads im Bereich Machine Learning und Big Data zielt auf lange laufende Jobs unter anderem in Kubernetes.  ( 4 min )

Weil er Zugangsdaten zu IT-Systemen rund um den Globus auf einem Darknet-Marktplatz verhökert hat, wurde ein Ukrainer nun zu vier Jahren Haft verurteilt.  ( 4 min )

Das neue Kali Linux ist da. Dank Snapshots kann man das System nun zurücksetzen. Neue Tools erweitern den Funktionsumfang.  ( 3 min )

Viele der Mittelständler führen laut "Deutschland sicher im Netz" keine Angriffserkennung gegen Cyberattacken durch, die Hälfte verschlüsselt E-Mails nicht.  ( 4 min )

Keine Abgase, leise, kein Schalten. Auch die bayerische Polizei ist vereinzelt schon elektrisch unterwegs – bislang aber nur auf vier Rädern.  ( 4 min )

Keine Abgase, leise, Automatikgetriebe. Auch die bayerische Polizei ist vereinzelt schon elektrisch unterwegs – bislang aber nur auf vier Rädern.  ( 4 min )

Neben iOS 15.5 liefert Apple auch neue Betriebssysteme für Mac, Apple TV, Apple Watch, HomePod und das Studio Display.  ( 4 min )

Mit gezielten Maßnahmen lassen sich Social-Media-Auftritte von Organisationen besser gestalten. Unser Workshop liefert praxisnah das nötige Rüstzeug.  ( 4 min )

Um sein Atomwaffenprogramm zu finanzieren, setzt Nordkorea auch auf Entwickler, die aus der Ferne für westliche Unternehmen arbeiten, warnen die USA.  ( 4 min )

Ab sofort können sich Python-Experten mit Talks und Workshops für die diesjährige Auflage der Konferenz für Python in Business, Web und DevOps bewerben.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann noch bis Sonntag beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Das deutsche Digitalministerium wartet noch auf Listen, um die Ukraine mit IT-Hardware zu unterstützen. Die Initiative KeepUkraineConnected ist da weiter.  ( 5 min )

Das deutsche Militär kann nicht geschützt kommunizieren. Darunter leidet bereits die Zusammenarbeit mit den NATO-Partnern, kritisiert Alfons Mais.  ( 4 min )

Für den Verbraucherschutz war das 2021 novellierte Telekommunikationsgesetz ein Schritt nach vorn. Zufrieden sind Verbraucherschützerinnen längst noch nicht.  ( 4 min )

Utilizing icons in user interface elements is helpful. In addition to element labeling, icons can help reinforce a user element’s intention to users. But I have to say, I notice a bit of icon misalignment while browsing the web. Even … Improving Icons for UI Elements with Typographic Alignment and Scale originally published on CSS-Tricks. You should get the newsletter.  ( 4 min )

A new variant of the macOS malware tracked as UpdateAgent has been spotted in the wild, indicating ongoing attempts on the part of its authors to upgrade its functionalities. "Perhaps one of the most identifiable features of the malware is that it relies on the AWS infrastructure to host its various payloads and perform its infection status updates to the server," researchers from Jamf Threat  ( 2 min )

The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements. Moises Luis Zagala Gonzalez, also known by the monikers Nosophoros, Aesculapius, and Nebuchadnezzar, is alleged to have both developed and marketed the  ( 3 min )

Traditional businesses migrating to the cloud need robust information security mechanisms. Gartner predicts that more than 95% of new digital workloads will continue to be deployed on cloud-native platforms by 2025. Robust cloud data security is imperative for businesses adopting rapid digital transformation to the cloud. While a traditional hosting model could be considered more secure, not all  ( 6 min )

Microsoft is warning of a new variant of the srv botnet that's exploiting multiple security flaws in web applications and databases to install coin miners on both Windows and Linux systems. The tech giant, which has called the new version Sysrv-K, is said to weaponize an array of exploits to gain control of web servers. The cryptojacking botnet first emerged in December 2020. "Sysrv-K scans the  ( 3 min )

More than 200 Android apps masquerading as fitness, photo editing, and puzzle apps have been observed distributing spyware called Facestealer to siphon user credentials and other valuable information.  "Similar to Joker, another piece of mobile malware, Facestealer changes its code frequently, thus spawning many variants," Trend Micro analysts Cifer Fang, Ford Quin, and Zhengyu Dong said in a  ( 3 min )

Image source: z3r00t The U.S. Cybersecurity and Infrastructure Security Agency on Monday added two security flaws, including the recently disclosed remote code execution bug affecting Zyxel firewalls, to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. Tracked as CVE-2022-30525, the vulnerability is rated 9.8 for severity and relates to a command injection flaw  ( 3 min )

Mit Arubas ClearPass Policy Manager können Administratoren die Zugangskontrolle regeln. Sicherheitslücken darin ermöglichen Angreifern die komplette Übernahme.  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Anti-aging drugs are being tested as a way to treat covid Covid-19 is far more likely to kill you if you’re old. One reason is that aged immune systems struggle to cope with…  ( 4 min )

Covid-19 is far more likely to kill you if you’re old. One reason is that aged immune systems struggle to cope with infections and recover from them. So why not try drugs that make bodies young again? That’s the bold idea now being explored in clinical trials around the world, which are testing drugs that…  ( 8 min )

Let’s take a closer look at how you can create your very own WordPress site up and running created and hosted with the Elementor Cloud Website.  ( 7 min )

In this episode, we ask how one man can go from designing websites for local bands to heading up Google Fonts Knowledge. Smashing’s Vitaly Friedman talks to Elliot Jay Stocks to find out.  ( 24 min )

An extensive study looking into the top 100k ranking websites has revealed that many are leaking information you enter in the site forms to third-party trackers before you even press submit. [...]  ( 5 min )

The US Department of Justice today said that Moises Luis Zagala Gonzalez (Zagala), a 55-year-old cardiologist with French and Venezuelan citizenship residing in Ciudad Bolivar, Venezuela, created and rented Jigsaw and Thanos ransomware to cybercriminals. [...]  ( 4 min )

Apple has released security updates to address a zero-day vulnerability that threat actors can exploit in attacks targeting Macs and Apple Watch devices. [...]  ( 4 min )

An unknown threat actor is targeting German users interested in the Ukraine crisis, infecting them with a custom PowerShell RAT (remote access trojan) and stealing their data. [...]  ( 4 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has removed a Windows security flaw from its catalog of known exploited vulnerabilities due to Active Directory (AD) authentication issues caused by the May 2022 updates that patch it. [...]  ( 4 min )

Offensive Security has released ​Kali Linux 2022.2, the second version in 2022, with desktop enhancements, a fun April Fools screensaver, WSL GUI improvements, terminal tweaks, and best of all, new tools to play with! [...]  ( 5 min )

Sophos has released a fix for a known issue triggering blue screens of death (aka BSODs) on Windows 11 systems running Sophos Home antivirus software after installing the KB5013943 upda [...]  ( 4 min )

The Parker-Hannifin Corporation announced a data breach exposing employees' personal information after the Conti ransomware gang began publishing allegedly stolen data last month. [...]  ( 4 min )

Windows 11 version 22H2 aka Sun Valley 2 is set to launch later this year. Unlike the original Windows 11 release, it won't be a massive update with radical design changes. Instead, Sun Valley 2 will be similar to Windows 10 Anniversary Update, so you can expect minor improvements and a few new features. [...]  ( 6 min )

Why be a customer when you can develop your own custom semiconductors Analysis  Here's something that should raise eyebrows in the datacenter world: Facebook parent company Meta has hired a veteran networking chip engineer from Intel to lead silicon design efforts in the internet giant's infrastructure hardware engineering group.…  ( 10 min )

Report says $42b will need to be poured into industry over next decade Growing demand for lithium for batteries means the sector will need $42 billion of investment to meet the anticipated level of orders by the end of the decade, according to a report.…  ( 8 min )

Still think we're ready for that autonomous future? Autonomous cars may be further away than believed. Testing of three leading systems found that they hit a third of cyclists, and failed to avoid any oncoming cars.…  ( 8 min )

Catching compromise attempts before kicking off that recovery plan Kubecon  Veeam acquisition Kasten kicked off this year's Kubecon with an updated version of its K10 product, aimed at securing the Kubernetes container orchestration platform.…  ( 8 min )

'Most challenging element of migration likely remains' warns analyst Spanish financial giant Santander has migrated 80 percent of its core banking IT infrastructure to the cloud as part of its $20.8 billion (€20 billion ) modernization programme, with the help of in-house software created by resident developers.…  ( 8 min )

<5% figure was based on 100 accounts, if you're wondering Updated  Last week Elon Musk hit pause on his Twitter acquisition over the platform's "less than 5 percent" bot figure.…  ( 8 min )

Instagram, Microsoft responsible for lifts coming in version 3.11 and beyond The next version of the standard Python interpreter, CPython, is expected in October. It will include significant performance improvements and support for running inside the browser.…  ( 7 min )

Agenda includes warning system for disruptions, and avoiding 'subsidy race' for chip investments The EU-US Trade and Technology Council (TTC) is meeting in Paris today to discuss coordinated approaches to global supply chain issues.…  ( 8 min )

Plus: DeepMind launches new generalist AI system, and Apple boffin quits over return-to-work policy In brief  Facial recognition bans passed by US cities are being overturned as law enforcement and lobbyist groups pressure local governments to tackle rising crime rates.…  ( 9 min )

Arm shows us that even total domination doesn't always make stupid levels of money Opinion  Interviews with chip company CEOs are invariably enlightening. On top of the usual market-related subjects of success and failure, revenues and competition, plans and pitfalls, the highly paid victim knows that there's a large audience of unusually competent critics eager for technical details. That's you.…  ( 9 min )

Bill McDermott thinks companies need workflow on top of enterprise apps, whether they replace them or not Interview  In a month that has seen nearly a fifth wiped from his company's share price, Bill McDermott is remarkably cheerful.…  ( 11 min )

Bye-bye bottlenecks. Hello composable infrastructure? Interview  Compute Express Link (CXL) has the potential to radically change the way systems and datacenters are built and operated. And after years of joint development spanning more than 190 companies, the open standard is nearly ready for prime time.…  ( 10 min )

Plus: Tech giants commit $30m to open-source security, miscreants breach DEA portal, and US signs cybercrime treaty In brief  San Francisco police have been using driverless cars for surveillance to assist in law enforcement investigations.…  ( 11 min )

Concerns raised over government drive to implement distinct post-Brexit policy Legal experts say UK government plans to create new data protection laws will make more work and add costs for business, while also creating the possibility of challenges to data sharing between the EU and UK.…  ( 8 min )

If I get in early and work hard, everyone will notice, right? Who, Me?  "The early bird trashes the business" is a saying that we've just made up, but could easily apply to the Register reader behind a currency calamity in today's episode of Who, Me?…  ( 8 min )

IT giant may be shifting its focus to software and services, but systems remain the foundation Analysis  At this month's Dell Technologies World show in Las Vegas, all the usual executives were prowling the keynote stages, from CEO Michael Dell to co-COOs Chuck Witten and Jeff Clark, all talking about the future of the company.…  ( 10 min )

Researchers find widespread harvesting of info without consent Tracking, marketing, and analytics firms have been exfiltrating the email addresses of internet users from web forms prior to submission and without user consent, according to security researchers.…  ( 10 min )

AA-battery-sized biological photovoltaic cell touted as ideal for IoT applications Researchers at the University of Cambridge's Department of Biochemistry have run an Arm CPU for six months using algae as a power source.…  ( 8 min )

Is state-approved Ubuntu distro how the Middle Kingdom will replace PCs with home-grown kit? China's military-derived and government-approved Linux distribution, Ubuntu Kylin, has revealed plans to target a second RISC-V platform.…  ( 8 min )

Hires external advisors to bolster decision making capacity and hints it could consider multiple buyout plans Ailing Japanese giant Toshiba has revealed it has 10 potential suitors for its possible sale.…  ( 7 min )

Markets outside China are doing better, but at home vendors have huge component stockpiles Demand for chips needed to make smartphones and PCs has dropped "like a rock" – but mostly in China, according to Zhao Haijun, the CEO of China's largest chipmaker Semiconductor Manufacturing International Corporation (SMIC).…  ( 8 min )

Mit dünnen Folien gibt Temicon fertigen Solarmodulen eine frei wählbare Farbe. Die Effizienz der PV-Zellen nimmt durch die Behandlung nicht ab – im Gegenteil.  ( 4 min )

Die Noctua Edition der GeForce RTX 3080 wird mit zwei 120-mm-Lüftern besonders leise – das Gesamtkonstrukt belegt vier PCIe-Steckplätze.  ( 4 min )

Händler können kontaktlose Zahlungen künftig per iPhone annehmen. Die Technik öffnet Apple für Dritte, ein europäischer Zahlungsdienstleister ist mit an Bord.  ( 4 min )

Das Unternehmen Elastic hat einen komplett überarbeiteten PHP-Client für das eigene Datenanalysetool angekündigt, der PHP Standards Recommendations konform ist.  ( 5 min )

Wirksame Sicherheitsvorkehrungen verspricht AWS und untermauert dies mit 18 nach C5 geprüften Ressourcen. Dies soll die Cloud für Behörden interessant machen.  ( 3 min )

Microsofts Entwicklerkonferenz Build findet in diesem Jahr auch in Präsenz in Berlin statt. Es gibt dort deutschsprache Sitzungen und Demos.  ( 3 min )

Beim dritten Thementag der Online-Konferenzreihe geht es um passende Tools und Techniken, die den gegenwärtigen Wandel der Arbeitswelt unterstützen.  ( 4 min )

Monitore sind entweder klassisch plan oder sie sind leicht gekrümmt und erlauben so mehr Immersion etwa beim Spielen. LG zeigt eine Kombi aus beiden Varianten.  ( 4 min )

Administratoren, die Trial- oder Evaluationsversionen von Windows herunterladen wollen, bekommen stattdessen Fehlermeldungen. Eine temporäre Linksammlung hilft.  ( 3 min )

Nvidia hat die Verfügbarkeit der CUDA-Version 11.7 bekanntgegeben, die neben neuen Open GPU Kernel-Modulen jetzt auch das "Lazy Loading" zu bieten hat.  ( 3 min )

Eine neue Variante des Sysrv-Botnets hat Microsoft beobachtet, die Windows- und Linux-Systeme befällt, um Kryptowährungen zu schürfen.  ( 3 min )

Die Robotikplattform RB6 bietet eine deutlich höhere KI-Leistung als frühere Modelle und soll so den Betrieb autonomer Roboter und Luftfahrzeuge ermöglichen.  ( 4 min )

Der Workshop zum weltweit meistgenutzten CMS zeigt in praktischen Übungen, wie Sie WordPress installieren und damit Webseiten aufsetzen, betreiben und warten.  ( 4 min )

Sonicwall schließt mehrere Sicherheitslücken in Firmwares von SMA-1000-Geräten und in SSL-VPN NetExtender. Angreifer könnten sich etwa Zugriff verschaffen.  ( 3 min )

Die italienische Polizei hat nach eigenen Angaben Cyberangriffe auf den Eurovision Song Contest abgewehrt. Die hätten sich primär gegen die Ukraine gerichtet.  ( 4 min )

Gezielt die Vorgaben des IT-Sicherheitsgesetzes des BSI befolgen: konkrete Starthilfe für KRITIS-Betreiber an zwei Tagen (online). Noch Plätze frei.  ( 3 min )

Die bei Hiscox Deutschland gemeldeten Cyber-Schäden hätten sich von 2020 auf 2021 fast verdoppelt.  ( 4 min )

Global styles, a feature of the block themes, is one of my favorite parts of creating block themes. The concept of global style variations in WordPress were introduced in Gutenberg 12.5 which would allow theme authors to create alternate … Creating Style Variations in WordPress Block Themes originally published on CSS-Tricks. You should get the newsletter.  ( 11 min )

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips related to Bluetooth, Near-field communication (NFC), and ultra-wideband (UWB) continue to operate while  ( 4 min )

Are you aware of fake clickjacking bug bounty reports? If not, you should be. This article will get you up to speed and help you to stay alert. What are clickjacking bug bounty reports? If we start by breaking up the term into its component parts, a bug bounty is a program offered by an organization, in which individuals are rewarded for finding and reporting software bugs. These programs are  ( 5 min )

An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service (DDoS) bot. What makes this malware-as-a-service (MaaS) stand out is that besides using a Telegram channel to communicate updates about the  ( 3 min )

The European Parliament announced a "provisional agreement" aimed at improving cybersecurity and resilience of both public and private sector entities in the European Union. The revised directive, called "NIS2" (short for network and information systems), is expected to replace the existing legislation on cybersecurity that was established in July 2016. The revamp sets ground rules, requiring  ( 3 min )

A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme. Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Social media platforms are still struggling to stop the spread of the Buffalo shooting video Social media platforms are still struggling to stop the spread of the video of the racist mass shooting…  ( 5 min )

One shiny premise of DeFi or decentralized finance—a catch-all term for cryptocurrencies and blockchain projects related to the exchange of value—is that by spreading out and automating operations, and removing power from middlemen like banks, it can offer a system more resilient to global forces, able to survive events like war and economic downturns that…  ( 7 min )

What makes the underused `Server-Timing` header uniquely powerful among all other response headers? We’ll rethink the expectation for using it exclusively for timing and see fast solutions for hard-to-solve monitoring challenges.  ( 17 min )

Sonicwall schließt mehrere Sicherheitslücken in Firmwares von SMA-1000-Geräten und in SSL-VPN NetExtender. Angreifer könnten sich etwa Zugriff verschaffen.  ( 3 min )

Hackers have started to exploit a recently patched critical vulnerability, tracked as CVE-2022-30525, that affects Zyxel firewall and VPN devices for businesses. [...]  ( 4 min )

A fake Pixelmon NFT site entices fans with free tokens and collectibles while infecting them with malware that steals their cryptocurrency wallets. [...]  ( 4 min )

Windows admins have been expressing their dismay at Microsoft's decision to move the Quick Assist remote assistance tool to the Microsoft Store. [...]  ( 4 min )

220 Euro für einen Laptop mit Touch-Display? Wir zeigen Windows-Notebooks, Convertible-PCs und 2-in-1-Geräte aller Preisklassen und was sie können.  ( 6 min )

Stockender Verkehr – ein Ärgernis für Autofahrer und umweltschädlich. Hessen setzt auf Digitalisierung des Stadtverkehrs, für weniger Stau und sauberere Luft.  ( 5 min )

EInk hat mit seiner elektronischen Tinte enorme Fortschritte erzielt. Jüngst zeigte das Unternehmen farbstarke Schilder und sogar ein farbiges Videodisplay.  ( 5 min )

Quantenpunkte findet man bald auch in TVs unter 500 Euro, denn die Partikel überleben nun auch in der Luft. Die Nanopartikel taugen zudem als Projektionsfläche.  ( 4 min )

In vier digitalen Live-Trainings lernen Interessierte in insgesamt 16 praxisnahen Stunden, wie sie mit TensorFlow eigene Machine-Learning-Projekte umsetzen.  ( 4 min )

An drei Terminen im Mai und Juni lernen Interessierte in 12 praxisnahen Stunden, Projektmanagement mit den Atlassian-Tools zu meistern.  ( 4 min )

Sometimes a half-sized shipping container at the base of a cell tower is all you need Analysis  Colocation facilities aren't just a place to drop a couple of servers anymore. Many are quickly becoming full-fledged infrastructure-as-a-service providers as they embrace new consumption-based models and place a stronger emphasis on networking and edge connectivity.…  ( 11 min )

For those that want to keep their data in the homeland Quantum computing outfit D-Wave Systems has announced availability of an Advantage quantum computer accessible via the cloud but physically located in the US, a key move for selling quantum services to American customers.…  ( 8 min )

A recent security update for a Windows NTLM Relay Attack has been confirmed to be a previously unfixed vector for the PetitPotam attack. [...]  ( 4 min )

Han Bing, a former database administrator for Lianjia, a Chinese real-estate brokerage giant, has been sentenced to 7 years in prison for logging into corporate systems and deleting the company's data. [...]  ( 4 min )

Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. But, this gruesome case of a London-based crypto robber transcends the virtual realm and tells a shocking tale of real-life victims from whom the perpetrator successfully stole £34,000. [...]  ( 7 min )

Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. But, this gruesome case of a London-based crypto robber transcends the virtual realm and tells a shocking tale of real-life victims from whom the perpetrator successfully stole £34,000. [...]  ( 7 min )

US publishes technical guide to help organizations avoid violating Americans with Disabilities Act The Biden administration and Department of Justice have warned employers using AI software for recruitment purposes to take extra steps to support disabled job applicants or they risk violating the Americans with Disabilities Act (ADA).…  ( 9 min )

Your US tax dollars at work The US Immigration and Customs Enforcement (ICE) agency has spent about $2.8 billion over the past 14 years on a massive surveillance "dragnet" that uses big data and facial-recognition technology to secretly spy on most Americans, according to a report from Georgetown Law's Center on Privacy and Technology.…  ( 9 min )

You robot kids, get off my LAN AI will completely automate the network within five years, Juniper CEO Rami Rahim boasted during the company’s Global Summit this week.…  ( 9 min )

We speak to scientists involved in historic first snap – and no, this isn't the M87* Astronomers have captured a clear image of the gigantic supermassive black hole at the center of our galaxy for the first time.…  ( 10 min )

We take a look at low, low subscription prices – not that we want to give anyone any ideas A Tor-hidden website dubbed the Eternity Project is offering a toolkit of malware, including ransomware, worms, and – coming soon – distributed denial-of-service programs, at low prices.…  ( 10 min )

Touting info on 6,700 compromised systems will get you four years behind bars A Ukrainian man has been sentenced to four years in a US federal prison for selling on a dark-web marketplace stolen login credentials for more than 6,700 compromised servers.…  ( 9 min )

2015 musste das NIST einen Verschlüsselungsalgorithmus beerdigen, da ihn die NSA unterwandert hatte. Bei Post-Quanten-Kryptografie soll das nicht passieren.  ( 5 min )

Große Online-Plattformen inklusive Netflix müssen laut EU-Rat künftig eine Infrastrukturabgabe zahlen, damit bis 2030 überall Gigabit-Anschlüsse möglich sind.  ( 5 min )

Das Asus Vivobook 13 Slate bietet als Windows-Tablet ab 590 Euro ein OLED-Display. Ob das 2-in-1-Laptop mit dem Surface mithalten kann, zeigt der Test.  ( 6 min )

Neue Raspi-Bastelprojekte: eine USB-Verlängerung übers LAN und ein Ultraschall-Zollstock. Zudem: Was der Microcontroller Raspi Pi Pico und ältere Raspis können.  ( 4 min )

Last month, a video went viral that showed a San Francisco police officer, at night, stopping a car that didn’t have its headlights on. Except that this was no ordinary car. As the cop approaches the vehicle, someone off-camera shouts, “Ain’t nobody in it!” The car, operated by Cruise, a subsidiary of General Motors, is…  ( 5 min )

Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications. The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five  ( 3 min )

SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability. The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below - CVE-2022-22282 (CVSS score: 8.2) - Unauthenticated Access  ( 2 min )

While ransomware attacks have slowed during Russia's invasion of Ukraine and the subsequent sanctions, the malware threat continues to affect organizations worldwide. [...]  ( 5 min )

Italy's Computer Security Incident Response Team (CSIRT) has published an announcement about the recent DDoS attacks that key sites in the country suffered in the last couple of days. [...]  ( 4 min )

Microsoft says the Sysrv botnet is now exploiting vulnerabilities in the Spring Framework and WordPress to ensnare and deploy cryptomining malware on vulnerable Windows and Linux servers. [...]  ( 3 min )

A new RedLine malware distribution campaign promotes fake Binance NFT mystery box bots on YouTube to lure people into infecting themselves with the information-stealing malware from GitHub repositories. [...]  ( 4 min )

SonicWall "strongly urges" customers to patch several high-risk security flaws impacting its Secure Mobile Access (SMA) 1000 Series line of products that can let attackers bypass authorization and, potentially, compromise unpatched appliances. [...]  ( 4 min )

A growing number of Russian Chrome users on Android report getting errors when attempting to install the latest available update of the popular web browser. [...]  ( 4 min )

David Harville is seventh to cop to harassment campaign David Harville, eBay's former director of global resiliency, pleaded guilty this week to five felony counts of participating in a plan to harass and intimidate journalists who were critical of the online auction business.…  ( 9 min )

Nvidia, AMD, Apple et al may be forced to pass cost on to customers Just as costs for some components have started to come down, TSMC and Samsung, the two largest contract chip manufacturers in the world, are reportedly planning to increase prices of production, which may affect Nvidia, AMD, Apple, and others that rely on the foundries.…  ( 8 min )

Demand for PostgreSQL and Kafka driving interest in cloud service, CEO tells The Register Finnish open-source-as-a-service provider Aiven received $210 million in funding this week, adding $1 billion to its nominal valuation in just nine months.…  ( 8 min )

Adds infosec regulation coming to more industries but with a light touch, more collaboration Black Hat Asia  Software made unsafe by dependencies should be fixed without users needing to interact with the source of the problem, according to US National Cyber Director Chris Inglis, who serves in the Executive Office of the President.…  ( 8 min )

The idea? To get investors muttering: DRAM, those gross margins are stable... Memory and storage maker Micron Technology has revealed a new business model intended to address the volatility in the memory market that has resulted in sharp swings in pricing over the past several years.…  ( 9 min )

Nine out of ten organizations would do it all over again, keeping attackers in business Almost nine in 10 organizations that have suffered a ransomware attack would choose to pay the ransom if hit again, according to a new report, compared with two-thirds of those that have not experienced an attack.…  ( 9 min )

The internet is now the first battleground of any new war – before the shooting starts Black Hat Asia  Cyber war has become an emerged aspect of broader armed conflicts, commencing before the first shot is fired, cybersecurity expert Kenneth Geers told the audience at the Black Hat Asia conference on Friday.…  ( 8 min )

'This is not recommended for production development. It may be unstable and it will have bugs' Canonical has begun slinging daily builds of Ubuntu at Windows Subsystem for Linux. We took a look at the not-for-production code.…  ( 8 min )

Khamenei, can you just not? Not right now, fam The Iran-linked Cobalt Mirage crew is running attacks against America for both financial gain and for cyber-espionage purposes, according to Secureworks' threat intelligence team.…  ( 10 min )

Yes/No/Cancel culture at its worst Something for the Weekend  "We all know what we're doing today? Good. Do your best!"…  ( 11 min )

Less than 5% of users are spam accounts? Is that too high ... or too high for him? Elon Musk has hit the brakes on his proposed takeover of Twitter in light of the platform's insistence that spam accounts accounted for less than five percent of its daily active users.…  ( 8 min )

Farewell to scheduling your emergencies in advance Microsoft is to permit unscheduled breaks into its exams, bringing relief to students working through the often lengthy process.…  ( 8 min )

Make it work like it does at home On Call  In this week's episode of our On Call column, an exasperated Register reader nearly walks the plank after failing to break the laws of physics.…  ( 10 min )

‘Cooperative mutation’ spots problems that checking scripts alone will miss Black Hat Asia  Security researchers have devised a tool that detects flaws in the way apps like Microsoft Word and Adobe Acrobat process JavaScript, and it's proven so effective they've found 134 bugs – 59 of them considered worthy of a fix by vendors, 33 assigned a CVE number, and 17 producing bug bounty payments totaling $22,000.…  ( 9 min )

As well as chip design licensing, 5G smartphones, cars ... who needs Nvi-whatchamacallit? With Arm looking to re-enter the public market at some point, the British chip designer is hoping to get would-be investors excited with figures that indicate it achieved record revenues and profits in 2021.…  ( 9 min )

Guess you could call this Mercury Ryzen Here's a new data point that will rile Intel up: AMD now accounts for nearly 30 percent of x86 CPU market share, and the chip designer got there during an industry downturn.…  ( 9 min )

Less demand will see prices fall, and gaming laptop sales rise – which is nice as the rest of the PC market has cooled Taiwanese hardware giant ASUSTeK says demand for GPU used to mine cryptocurrency is "disappearing" – and so is about ten percent of demand for personal computers.…  ( 8 min )

Around the time Beijing banned online gambling, RATs started targeting operators, say Taiwanese researchers Black Hat Asia  Keep an eye on new Chinese government policies, if you want to anticipate malware attacks, a threat intelligence analyst suggested at the Black Hat Asia conference on Thursday.…  ( 9 min )

Reverse-engineered code redirects visitors to dodgy corners of the internet A years-long campaign by miscreants to insert malicious JavaScript into vulnerable WordPress sites, so that visitors are redirected to scam websites, has been documented by reverse-engineers.…  ( 9 min )

Yes, give those smartNICs something to do Trusted platform modules (TPMs) got a bad rap for headaches they caused some PC enthusiasts. One place they are arguably more palatable is the datacenter, or so AWS, at least, hopes with the actual, real launch of its NitroTPM for Elastic Compute Cloud (EC2).…  ( 9 min )

OK includes an outage, plummeting cryptocurrencies, falling stock price Coinbase CEO Brian Armstrong has scrambled to alleviate fears that customers storing cryptocurrencies at the digital cash exchange will lose everything if the biz goes under.…  ( 9 min )

Microsoft probes complaints of domain controller headaches Microsoft is warning a security update may cause authentication failures for Windows domain controllers.…  ( 9 min )

If your stock or crypto-coin holdings look like crap today, this might help you feel better SoftBank lost a lot of money over the past 12 months.…  ( 8 min )

Überwachungskameras mit zusätzlichen LEDs können bei Bewegungserkennung oder dauerhaft für Licht sorgen. Je nach Einsatzzweck gibt es unterschiedliche Modelle.  ( 6 min )

Nachzügler: Die grafische Anwendung zur Verwaltung von Containern, Volumes und Images erscheint nach Windows und macOS auch für den Linux-Desktop.  ( 4 min )

Ab sofort lassen sich EC2-Systeme mit einer virtuellen TPM-Implementierung sowie UEFI-Support einrichten. Zum Start sind Linux- und Windows-VMs mit an Bord.  ( 3 min )

Die Organisatoren des Cloud Native Community Festival heißen auch die Jakarta-Gemeinde willkommen zum offiziellen JakartaOne Livestream am 30. Juni 2022.  ( 5 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Eclipse Theia, Solr, TypeScript, WildFly, Google, O3DE und Komodor.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Vor über einem halben Jahr hat Microsoft Windows 11 veröffentlicht. Wurden die größten Kritikpunkte inzwischen behoben?  ( 8 min )

Bei der Luca-App und der Sormas-Schnittstelle zur Kontaktnachverfolgung sei der Datenschutz laut der Beauftragten für Brandenburg zu kurz gekommen.  ( 4 min )

Mehrere Macs und iPads mit einer Tastatur und Maus bedienen: In macOS 12.4 erklärt Apple die Entwicklung von Universal Control als abgeschlossen.  ( 4 min )

Über die Website zensus2022.de erfasst Destatis sensible Bürgerdaten. Nun stellt sich heraus, dass ausgerechnet der US-Dienst Cloudflare eingebunden ist.  ( 5 min )

In der aktuellen Insider-Preview für Windows 11 probiert sich Microsoft mit "Suggested Actions" an kontextsensitiven Aktionen für Telefonnummern und Daten.  ( 4 min )

Ein Vorserienmodell eines Zen-4-Achtkerners erreichte Taktfrequenzen jenseits der 5 GHz und verwendete eine integrierte Grafikeinheit.  ( 3 min )

Mit dem Cluster API Provider für das Open-Source-Projekt vcluster lassen sich virtuelle Kubernetes-Cluster auf die gleiche Weise bereitstellen wie physische.  ( 3 min )

Im Rahmen des Release 13 basiert TrueNAS nun auf einem aktuellen FreeBSD und packt vor allem die Geschwindigkeit des Open-Source-NAS-Systems an.  ( 6 min )

Sonys Playstation nutzt zumindest Teile von NetBSD. Eine Treiber-Sicherheitslücke könnte Angreifern aus dem LAN ermöglichen, eigenen Code einzuschleusen.  ( 4 min )

Dem Betreiber des Ölpipelinesystems droht eine hohe Geldstrafe. Fehlendes Notfallmanagement war wohl mitursächlich für die Ransomware-Auswirkungen 2021.  ( 4 min )

Der KI-Agent von DeepMind kann Atari spielen, Textanweisungen befolgen, Bilder beschriften, chatten und einen Roboterarm kontrollieren – aus einem Transformer.  ( 5 min )

Auch unabhängig von den jüngsten Preisstürzen kaufen Mining-Farmen weniger Grafikkarten – aus Vorsicht, wie es mit dem Schürfen von Ethereum weitergeht.  ( 4 min )

Wer sein Gerät im Rahmen des neuen iPhone Self Service Repair Program instand setzen will, benötigt besondere Hardware. Die lässt sich mieten.  ( 4 min )

Das Update des Datenformats für Simulationsstandards bringt Neuerungen für Co-Simulation und baut die Arbeit mit Digital Twins auf Systemebene weiter aus.  ( 4 min )

ServiceNow hält seine Hausmesse ab und will mit neuen Tools das IT-Service-Management sowie Behördengänge verbessern.  ( 3 min )

Eine Sicherheitslücke in der Desktop-Firewall ZoneAlarm könnte Angreifern ermöglichen, ihre Rechte im System auszuweiten und somit die Kontrolle zu übernehmen.  ( 3 min )

Mit Blick auf die wachsenden Gefahren für die Software Supply Chain ernennt die Stiftung Mikaël Barbero zum Head of Security.  ( 4 min )

Microsoft-Updates aus dem Mai verursachen bei Nutzern Probleme etwa beim Starten bestimmter Anwendungen. Zudem können Dienste Authentifizierungsprobleme melden.  ( 4 min )

Ein wichtiges Sicherheitsupdate schließt eine kritische Lücke in mehreren Firewall-Modellen von Zyxel.  ( 3 min )

Auf der diesjährigen Google I/O hat das Unternehmen neben der Version 3 des Frameworks Flutter auch ein neues Dart SDK mit Versionsnummer 2.17 angekündigt.  ( 4 min )

Am 18. Mai 2022 findet ein halbtägiges Webinar zu Threat Modeling statt. Ein Workshop am 23. Mai vertieft das Thema praxisorientiert.  ( 3 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Read this conversation with Matthias Haberstroh, director of supply chain management at ZF Group, where he discusses the pandemic’s impact on the digitalization of the automotive supply chain and how it will define the future of the industry. Click here to…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Contact centers hold significant value for businesses, but they often have to deal with a disengaged workforce and unsatisfied customers. New AI systems can help contact centers become future-ready with a smarter workforce, happier customers, and stronger finances. Click here to…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” The transformative potential of algorithmic systems, the reach of their effects, combined with the paucity of supervision, can bring certain reputational, financial, and ethical risks. Responsible AI is required to provide assurance to users and build continuous trust in AI-based systems.…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Watch this panel discussion to hear experts explain how global manufacturers can harness the power of data and analytics on top of cloud. Panel experts include: Scott Anderson, director of IT, enterprise architecture, and BI/data analytics apps, and automation CoE at…  ( 2 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A quick guide to the most important AI law you’ve never heard of It’s a Wild West out there for artificial intelligence. AI applications are increasingly used to make important decisions about humans’…  ( 4 min )

It’s a Wild West out there for artificial intelligence. AI applications are increasingly used to make important decisions about humans’ lives with little to no oversight or accountability. This can have devastating consequences: wrongful arrests, incorrect grades for students, and even financial ruin. Women, marginalized groups, and people of color often bear the brunt of…  ( 6 min )

In my last article we saw how CSS background properties allow us to create cool hover effects. This time, we will focus on the CSS text-shadow property to explore even more interesting hovers. You are probably wondering how adding shadow … Cool Hover Effects That Use CSS Text Shadow originally published on CSS-Tricks. You should get the newsletter.  ( 7 min )

Google on Thursday announced the creation of a new "Open Source Maintenance Crew" to focus on bolstering the security of critical open source projects. Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine "whether a vulnerability in a dependency might affect your code." "With this information, developers  ( 2 min )

A spear-phishing campaign targeting Jordan's foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama. Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group. "Like many of these attacks, the email contained a  ( 3 min )

Zyxel has moved to address a critical security vulnerability affecting Zyxel firewall devices that enables unauthenticated and remote attackers to gain arbitrary code execution. "A command injection vulnerability in the CGI program of some firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device," the company said in an advisory  ( 3 min )

Sonys Playstation nutzt zumindest Teile von NetBSD. Eine Treiber-Sicherheitslücke könnte Angreifern aus dem LAN ermöglichen, eigenen Code einzuschleusen.  ( 4 min )

Eine Sicherheitslücke in der Desktop-Firewall ZoneAlarm könnte Angreifern ermöglichen, ihre Rechte im System auszuweiten und somit die Kontrolle zu übernehmen.  ( 3 min )

Ein wichtiges Sicherheitsupdate schließt eine kritische Lücke in mehreren Firewall-Modellen von Zyxel.  ( 3 min )

We waste so much today. One way of focusing on what truly matters is by identifying Top Tasks for yourself. Learn how to make tough decisions by focusing on the real, quantifiable evidence that will help create a better experience for your users.  ( 11 min )

Threat analysts have spotted a novel attack attributed to the Iranian hacking group known as APT34 group or Oilrig, who targeted a Jordanian diplomat with custom-crafted tools. [...]  ( 4 min )

Glib Oleksandr Ivanov-Tolpintsev, a 28-year-old from Ukraine, was sentenced today to 4 years in prison for stealing thousands of login credentials per week and selling them on a dark web marketplace. [...]  ( 3 min )

Threat actors have launched the 'Eternity Project,' a new malware-as-a-service where threat actors can purchase a malware toolkit that can be customized with different modules depending on the attack being conducted. [...]  ( 4 min )

Threat analysts who discovered a vulnerability affecting multiple Zyxel products report that the network equipment company fixed it via a silent update pushed out two weeks ago. [...]  ( 4 min )

Threat analysts who discovered a vulnerability affecting multiple Zyxel products report that the network equipment company fixed it via a silent update pushed out two weeks ago. [...]  ( 4 min )

A recently discovered backdoor malware called BPFdoor has been stealthily targeting Linux and Solaris systems without being noticed for more than five years. [...]  ( 7 min )

NVIDIA has published the source code of its kernel modules for the R515 driver, using a dual licensing model that combines the GPL and MIT licenses, making the modules legally re-distributable. [...]  ( 4 min )

Historic Hotel of America serving up modern malware to their guests. Why securing your inbox with more than just anti-malware engines is needed to prevent cybercrime attacks. [...]  ( 6 min )

Microsoft is investigating a known issue causing authentication failures for some Windows services after installing updates released during the May 2022 Patch Tuesday. [...]  ( 4 min )

Microsoft is testing a new 'Suggested Actions' feature in Windows 11 Dev builds where the operating system suggests actions you can take with data you copy into the clipboard. [...]  ( 3 min )

So. Many. BIOS. Bugs Intel has disclosed high-severity bugs in its firmware that's used in datacenter servers, workstations, mobile devices, storage products, and other gear. These flaws can be exploited to escalate privileges, leak information, or stop things from working.…  ( 9 min )

That bit in Ghostbusters when they shut off the containment unit? That, but with social networks On Wednesday, the US Fifth Circuit Court of Appeals decided to undo a preliminary injunction that for the past few months has been blocking Texas's law prohibiting online content moderation while that legislation is being challenged.…  ( 9 min )

Team Xeon reveals 'Trust-as-a-Service' while Google Cloud details deeper ties with Team Zen Analysis  As cloud service providers increasingly look to x86 architecture alternatives, Intel and AMD are trying to find ways to gain or hold favor in the market – and this includes baking in security features and forming services and partnerships.…  ( 12 min )

German software giant reprises old motifs at annual show Sapphire SAP has attempted to energize its annual Sapphire shindig by expounding the virtues of its strategy since €28 billion was wiped off the company's value in 2020 due to the pandemic.…  ( 9 min )

Latest version of Red Hat's free distro family arrives, a day after the paid one Version 36 of the free community distro sponsored by Red Hat is here – but there's a lot more to Fedora 36 than just the well known desktop distro with its different desktop spins.…  ( 10 min )

CEO points to two very different multi-cloud markets, says it's already spoken to potential buyer Rackspace Technology is considering selling off at least part of its business following a strategic review, with CEO Kevin Jones admitting that "everything is on the table."…  ( 8 min )

Lincoln College shuttering after 157 years, ransomware attack from Iran final straw A December attack against a long-standing college in Illinois has pushed the institution to permanently close. …  ( 7 min )

It looks like you've copied a phone number, would you like help? The Windows Insider Dev Channel has introduced a feature it is calling "Suggested Actions" to the work-in-progress build of Windows 11, and testers love it so much they are already asking how to turn it off.…  ( 7 min )

Startup aims to add more than 150 workers by the end of 2022 Cloud storage company Panzura has received an $80 million injection in a Series B funding round, which CEO Jill Stelfox says it'll use to build a "different" kind of storage company.…  ( 8 min )

DigitalBridge Group and global infrastructure investor IFM Investors to acquire all outstanding shares US datacenter operator Switch Inc is to be purchased by private investors led by DigitalBridge Investment Management in an all-cash transaction for approximately $11 billion.…  ( 7 min )

Analysts also insist organizations need to get data ops for AI in gear or face 2-year delay By 2025, half of analytics will be developed by business users via a low-code or no-code modular assembly experience, according to Gartner.…  ( 8 min )

Microsoft embraces Nuance to deepen its healthcare connections Microsoft's purchase of AI company Nuance got Redmond's foot in the door of the healthcare industry, and it's widening the opening as Nuance helps form an industry group to explore applications of AI in hospitals and clinics.…  ( 7 min )

Please season with pinches of salt as necessary Apple may ditch its exclusive Lightning port in favor of the more widely used USB-C for future iPhone models.…  ( 7 min )

In fact, most of them are great people Opinion  You might be excused if you think most Linux and open-source leaders are, ah, rude.…  ( 10 min )

Launches almost 1,000 raids, plenty with upgraded malware Black Hat Asia  The advanced persistent threat gang known as SideWinder has gone on an attack spree in the last two years, conducting almost 1,000 raids and deploying increasingly sophisticated attack methods.…  ( 8 min )

Pasqal to provide compute based on approaches by Qu&Co acquisition BMW has become the latest company to give quantum an early chance, with the goal of shrinking development cycles beyond traditional means.…  ( 9 min )

'Mischief abroad' is the Middle Kingdom's goal – without the possibility of using Chinese sites to fight back Black Hat Asia  The time has come to remove Chinese voices from global social media, according to Samir Saran, president of Delhi-based think tank Observer Research Foundation (ORF), a commissioner of The Global Commission on the Stability of Cyberspace, and a member of Microsoft's Digital Peace Now Initiative.…  ( 8 min )

If we're gonna go through this again, can we just literally go back in time? Proposed Europe regulations that purport to curb child abuse by imposing mass surveillance would be a "disaster" for digital privacy and strong encryption, say cybersecurity experts.…  ( 9 min )

Private orgs that flex with Russian bans may do more harm – to themselves – than good Black Hat Asia  The war in Ukraine, and the Declaration for the Future of the Internet signed by 60 nations in late April, should be understood in the context of a global effort to recruit the nations of the world into blocs with different attitudes to internet governance.…  ( 9 min )

A Turing point for the graphics chip giant, perhaps? Nvidia on Wednesday published the R515 driver release of its Linux GPU kernel modules under an open source, dual GPL/MIT license.…  ( 9 min )

Snyk, JFrog, ReversingLabs spend weeks investigating modules that turn out to be pen-test code Malicious packages in the NPM Registry that security researchers for weeks believed were being used to stage supply-chain attacks against prominent industrial companies in Germany turned out to be part of a penetration test run by a cybersecurity company.…  ( 10 min )

Your essential de-hyped guide to what the Chocolate Factory teased at developer shindig Google IO  Google I/O, the ad biz's annual developer conference, returned to the Shoreline Amphitheater in California's Mountain View on Wednesday, for the first time in three years. The gathering remained largely a remote event due to the persistence of COVID-19 though there were enough Googlers, partners, and assorted software developers in attendance to fill venue seats and punctuate important points with applause.…  ( 11 min )

Der 128-Kern-Prozessor der erst 2016 gegründeten Firma soll mehrfach schneller rechnen als AMD Epyc, Intel Xeon und Nvidia Hopper.  ( 4 min )

Apple kann MacBook Air und Pro wohl erst wieder ab Juli liefern. Auch bei anderen Produkten gibt es lange Wartezeiten. Der Konzern erwartet Milliardeneinbußen.  ( 4 min )

Die GPUs in AMDs Kombiprozessoren Ryzen 6000 übertragen 40 Gbit/s über DisplayPort 2.0 – etwa für 4K-Monitore mit hoher Bildwiederholrate.  ( 4 min )

GitHub kündigt erweiterte 2FA-Absicherung für npm-Accounts an. Zuvor sei der Account hinter dem Package foreach von einer Übernahme bedroht gewesen.  ( 4 min )

Die Prozessorenhersteller AMD und Intel beheben Sicherheitslücken. Rechnerhersteller müssen zum Abdichten zumeist BIOS-Updates verteilen.  ( 4 min )

Ein scheinbar bösartiger Supply-Chain-Angriff auf vier Firmen hat sich als Penetrationstest herausgestellt, zeigt aber die anhaltende Gefahr der Attacken.  ( 4 min )

Verkaufen lohnt nicht mehr, zum Wegwerfen zu schade: Alte Apple-Hardware landet oft in der Schublade, dabei gibt es viele interessante Einsatzmöglichkeiten.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann für kurze Zeit beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Das Release bringt eine WebAuthn Extension zur passwortlosen Authentifizierung im Preview-Status mit, ebenso wie Voreinstellungen für OpenID Connect.  ( 3 min )

Welche Apotheken E-Rezepte verarbeiten können, zeigt die für die Digitalisierung des Gesundheitssystems zuständige Gematik GmbH mithilfe einer Deutschlandkarte.  ( 4 min )

Nvidia hat angekündigt, die Linux-Kernel-Module für seine GPUs künftig unter den offenen Lizenzen GPL und MIT dual-lizenziert zur Verfügung zu stellen.  ( 6 min )

Reality Labs steht im Mittelpunkt von Metas Metaverse. Um sich besser darauf konzentrieren zu können und Kosten einzusparen, sollen andere Projekte entfallen.  ( 4 min )

Die JavaScript-Konferenz findet in diesem Jahr wieder vor Ort in Darmstadt statt. Neben den 35 Vorträgen und vier Workshops stehen nun auch die Keynotes fest.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Thema diesmal: das umstrittene Wasserfallmodell und seine Mythen.  ( 3 min )

Die Verantwortung für eins der populärsten Testwerkzeuge für JavaScript wandert von Meta zu der unter dem Dach der Linux Foundation geführten OpenJS Foundation.  ( 5 min )

Wer einen PC von HP besitzt, sollte die Firmware aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

In fünf digitalen Live-Trainings lernen Interessierte in insgesamt 20 praxisnahen Stunden, wie sie die tägliche Arbeit mit dem SQL Server meistern  ( 4 min )

Beim FTTH/B-Ausbau erscheint die vom BMDV angestrebte Ausbauquote von 50 Prozent bis Ende 2025 realistisch - doch die Telekom könnte noch auf die Bremse treten.  ( 4 min )

Hacker können Kundendaten und Code aus Apps stehlen. Unser Online-Workshop vermittelt praxisnah, wie Sie Ihren Quellcode gegen Reverse-Engineering verteidigen.  ( 4 min )

Rund um den nächsten POD bieten Profis zwei Workshops: Wirkungsvolle OKRs und Kommunikation als Product Owner. Das Kombiticket umfasst zudem Konferenzvideos.  ( 5 min )

Dem bayerischen Heimatminister ist die Mindestbandbreite von 10 Mbit/s im Download zu wenig, um es als "schnelles Internet" zu bezeichnen.  ( 4 min )

Der Angriff Russlands auf die Ukraine hat auch die Bewertung von Firmen deutlich verändert. Energieanbieter erhalten Zulauf, Konzerne wie Apple verlieren.  ( 4 min )

Geo-political tensions and digital transformation—which continue to reshape production and assembly processes across various industries—have exposed vulnerabilities in the traditional “just-in-time” (JIT) supply-chain model in the last few years. Pioneered in Japan and popularized by Toyota in the 1970s, the JIT method aims to avoid excess inventory by ordering products and raw materials only when…  ( 6 min )

The supermassive black hole at the heart of our Milky Way galaxy has been photographed for the first time, giving astronomers invaluable insight into how black holes interact with their surroundings. The object, known as Sagittarius A*, was captured by the Event Horizon Telescope Collaboration, the same global team that took the famous first-ever picture…  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Google is failing to enforce its own ban on ads for stalkerware Google Search displays advertisements for stalkerware services that boast real-time monitoring of romantic partners and spouses, despite the company’s self-imposed ban…  ( 4 min )

Google Search displays advertisements for stalkerware services that boast real-time monitoring of romantic partners and spouses, despite the company’s self-imposed ban on such ads.  According to research by mobile security firm Certo Software and confirmed by MIT Technology Review, Google Search queries related to tracking partners such as a wife or girlfriend commonly return ads…  ( 4 min )

Braydon Coyer recently launched a monthly CSS art challenge. He actually had reached out to me about donating a copy of my book Move Things with CSS to use as a prize for the winner of the challenge — … A CSS Slinky in 3D? Challenge Accepted! originally published on CSS-Tricks. You should get the newsletter.  ( 11 min )

A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia. Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobalt Mirage, which it said is linked to an Iranian hacking crew dubbed Cobalt Illusion (aka APT35,  ( 3 min )

The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE). To that end, online service providers, including hosting services and communication apps, are expected to proactively scan their platforms for CSAM as well as  ( 4 min )

Cybersecurity researchers have disclosed a massive campaign that's responsible for injecting malicious JavaScript code into compromised WordPress websites that redirects visitors to scam pages and other malicious websites to generate illegitimate traffic. "The websites all shared a common issue — malicious JavaScript had been injected within their website's files and the database, including  ( 3 min )

Google on Wednesday took to its annual developer conference to announce a host of privacy and security updates, including support for virtual credit cards on Android and Chrome. "When you use autofill to enter your payment details at checkout, virtual cards will add an additional layer of security by replacing your actual card number with a distinct, virtual number," Google's Jen Fitzpatrick  ( 3 min )

In recent months, a cybercriminal gang known as LAPSUS$ has claimed responsibility for a number of high-profile attacks against technology companies, including: T-Mobile (April 23, 2022) Globant  Okta Ubisoft Samsung Nvidia Microsoft Vodafone In addition to these attacks, LAPSUS$ was also able to successfully launch a ransomware attack against the Brazilian Ministry of Health. While  ( 5 min )

Multiple cybersecurity authorities from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory warning of threats targeting managed service providers (MSPs) and their customers. Key among the recommendations include identifying and disabling accounts that are no longer in use, enforcing multi-factor authentication (MFA) on MSP accounts that access customer  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild. The flaw, assigned the identifier CVE-2022-1388 (CVSS score: 9.8), concerns a critical bug in the BIG-IP iControl REST endpoint that provides an unauthenticated adversary with a method to  ( 3 min )

Researchers have detailed a previously undocumented .NET-based post-exploitation framework called IceApple that has been deployed on Microsoft Exchange server instances to facilitate reconnaissance and data exfiltration. "Suspected to be the work of a state-nexus adversary, IceApple remains under active development, with 18 modules observed in use across a number of enterprise environments, as  ( 3 min )

Die Prozessorenhersteller AMD und Intel beheben Sicherheitslücken. Rechnerhersteller müssen zum Abdichten zumeist BIOS-Updates verteilen.  ( 4 min )

Wer einen PC von HP besitzt, sollte die Firmware aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

In this article, Dan Shappir analyzes the performance cost associated with various frameworks and explains the wide variety of framework and platform choices that are currently available to front-end and fullstack developers.  ( 15 min )

We can think of one thing the S stands for in some unfortunate cases Miscreants are targeting managed service providers (MSPs) to break into their customers' networks and deploy ransomware, steal data, and spy on them, the Five Eyes nations' cybersecurity authorities have formally warned in a joint security alert.…  ( 9 min )

Human-free seafaring isn't going swimmingly The crewless AI-powered Mayflower ship, which was on its second attempt to cross the Atlantic ocean alone, is being hauled back to shore after suffering a mechanical failure.…  ( 8 min )

v3.0 has also gained a Casual Games Toolkit Google I/O  Google's Flutter development framework finally achieved its cross-platform aspirations with a stable release of Linux and macOS support.…  ( 11 min )

Records for revenue, gross margin in Q1 as others take a hit While some chipmakers have reported a hit to their revenue due to COVID-19 lockdowns in China and other effects, New York-based GlobalFoundries said its business stood strong in the face of various global disruptions.…  ( 8 min )

Classical internetworking and standards matter less, now that CDNs and private networks dominate traffic Analysis  The internet has become smaller – the result of a necessary re-thinking of when and where to use the net's original architecture. But in the process it may also have further concentrated power in the hands of giant technology companies.…  ( 13 min )

Plus: iXsystems' NAS OS has a new Linux-based sibling called SCALE BSD vendor iXsystems has released the latest version of its FreeBSD-derived Network Attached Storage (NAS) OS, TrueNAS 13.0.…  ( 9 min )

Slips some extra grunt into Snapdragon X70 5G chipset before devices launch Qualcomm has updated its Snapdragon X70 5G chipset to extend range and balance the transmit power for better performance. It also claims the Snapdragon modem will be the first to support a standalone 5G mmWave connection once it is available.…  ( 8 min )

RHEL, RHEL, RHEL, how about that? We talk to founder about HPC, open source and more Interview  CIQ, founding sponsor and services partner of Rocky Linux – a community build of Red Hat Enterprise Linux (RHEL) – is to receive a $26m injection of private funding led by Two Bear Capital.…  ( 8 min )

The progress bar of lies reborn as a cheery 'Checking' message Microsoft Visual Studio appears to be having a bad Wednesday with users of the development suite forced to jump into Microsoft's feedback forum to complain about prolonged problems with the software's installer.…  ( 7 min )

Secureworks' investigation only the latest evidence Kaseya and JBS attackers are on the move again New ransomware samples analyzed by Secureworks' threat intelligence team are the latest indication that high-profile ransomware operation REvil is once again up and running after months of relative inactivity.…  ( 8 min )

Going for a walk: Good. Doomscrolling: Bad What are your peers doing to stave off burnout? Research from Stack Overflow suggests about half of developers are still spending their breaks in front of a screen.…  ( 8 min )

eVocore processor line aimed at high-performance, real-time compute applications MIPS is back, but this time the company is bringing processors to market based on the RISC-V open instruction set architecture, rather than the MIPS architecture the chip designer is synonymous with.…  ( 8 min )

Link between compliance and sales appeared to boost cloud performance in case disputed by Big Red A US class-action case claiming Oracle falsely inflated its cloud revenue by threatening customers with audits is set to continue after a federal judge approved the damages model proposed by the plaintiffs.…  ( 8 min )

Fire the update engines if you haven't already Microsoft has pulled the plug on support for .NET 5 and the Pro and Home versions of Windows 10 20H2.…  ( 8 min )

By 2030 we'll be shipping 1.2 billion cellular-module devices each year, says analyst 4G will continue to be the dominant cellular connectivity technology used by IoT devices until 2028, according to a report from Counterpoint Research.…  ( 7 min )

Zero-touch provisioning, single-node deployments, and Advanced Cluster Management support confirmed Red Hat Summit  Red Hat is targeting edge deployments with fresh features across a portfolio based around containerized software deployments that build on its Enterprise Linux and OpenShift application platform.…  ( 7 min )

What goes up will also come down. The question is... how? Orbex is showing off a full-scale prototype of the Prime rocket atop its test stand at Kinloss in Scotland.…  ( 8 min )

IT and network services to replace 56 legacy workflow systems with ServiceNow UK telecoms and IT services company BT is forecasting £25 million ($30.8 million) in savings over five years by ditching some legacy applications and switching to ServiceNow workflow and automation technologies.…  ( 8 min )

30! million! users! already! moved! to! TXT! and/or! FIDO! Attacks! and! support! requests! both! down! Yahoo Japan has revealed that it plans to go passwordless, and that 30 million of its 50 million monthly active users have already stopped using passwords in favor of a combination of FIDO and TXT messages.…  ( 8 min )

Analytics veteran also cosies up to consultancies to extend market reach in IPO year Analytics industry veteran SAS has announced support for Python in its proprietary analytics studio.…  ( 8 min )

The cost of kit to capture the real world is plummeting, thanks to Apple For the past six months I've been staring at the backside of my iPhone 13 Pro wondering what possessed Apple to build a Light Detection and Ranging (LIDAR) camera into its flagship smartphone.…  ( 9 min )

Six ride sharing companies forced into consumer redress scheme India has accused ride-sharing companies of over-charging loyal customers who regularly take the same route, and directed six platforms to become part of a scheme that offers third-party grievance handling services.…  ( 8 min )

The day the music died … was probably 2007, when the iPhone made standalone music players redundant Apple has ended production of the last remaining version of the iPod – the iPod Touch.…  ( 10 min )

NUC NUC. Who's there? Intel Vision  Scale Computing announced a strategic partnership with Intel on Monday to offer a fully integrated, low-power platform for deploying and managing applications at the edge.…  ( 8 min )

Make supply chain woes work to your advantage If datacenter operators want to compete with the cloud providers, they've got to start thinking more like them. That's what Mike Bushong, VP of Datacenter Business at Juniper, told The Register.…  ( 9 min )

Plus many more flaws. And Adobe, Android, SAP join the bug-squashing frenzy Microsoft patched 74 security flaws in its May Patch Tuesday batch of updates. That's seven critical bugs, 66 deemed important, and one ranked low severity.…  ( 10 min )

And China to get first dibs when graphics chips do ship Intel Vision  The rollout of Intel's Arc discrete GPUs has been slower than expected for folks hungry for a fresh option in the computer graphics hardware market. This week, the x86 giant attempted to explain what's taking so long.…  ( 8 min )

Campaign to coax GitHub-owned outfit to improve security starts showing results Special report  Security consultant Lance Vick recently acquired the expired domain used by the maintainer of a widely used NPM package to remind the JavaScript community that the NPM Registry still hasn't implemented adequate security.…  ( 12 min )

Windows 11 users are receiving 0xc0000135 errors when attempting to launch applications after installing the recent Windows 11 KB5013943 cumulative update. [...]  ( 4 min )

The U.S. Department of Justice (DoJ) has charged Idris Dayo Mustapha for a range of cybercrime activities that took place between 2011 and 2018, resulting in financial losses estimated to over $5,000,000. [...]  ( 4 min )

Microsoft says multiple editions of Windows 10 20H2 and Windows 10 1909 have reached their end of service (EOS) on this month's Patch Tuesday, on May 10, 2022. [...]  ( 4 min )

HP has released BIOS updates today to fix two high-severity vulnerabilities affecting a wide range of PC and notebook products, which might allow arbitrary code execution. [...]  ( 4 min )

A new remote access trojan called Nerbian RAT has been discovered that includes a rich set of features, including the ability to evade detection and analysis by researchers. [...]  ( 4 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. [...]  ( 4 min )

There is no doubt that open source powers our development processes, enabling software developers to build high quality, innovative products faster than ever before. But OSS also comes with its own set of risks that device manufacturers must address while leveraging its many advantages. [...]  ( 5 min )

Members of the Five Eyes (FVEY) intelligence alliance today warned managed service providers (MSPs) and their customers that they're increasingly targeted by supply chain attacks. [...]  ( 3 min )

New activity has been observed from Bitter, an APT group focused on cyberespionage, targeting the government of Bangladesh with new malware with remote file execution capabilities. [...]  ( 4 min )

Microsoft has addressed a known issue causing apps using Direct3D 9 to experience issues after installing April 2022 cumulative updates, including crashes and errors on systems using certain GPUs. [...]  ( 3 min )

Security researchers have found a new post-exploitation framework that they dubbed IceApple, deployed mainly on Microsoft Exchange servers across a wide geography. [...]  ( 4 min )

A recently disclosed F5 BIG-IP vulnerability has been used in destructive attacks, attempting to erase a device's file system and make the server unusable. [...]  ( 4 min )

AlloyDB soll als Cloud-native Datenbank Amazon Aurora Konkurrenz machen. Google verspricht Kompatibilität mit PostgreSQL – bei besserer Leistung.  ( 4 min )

Auf seiner jährlichen Entwicklerkonferenz hat Google eine Reihe von Neuerungen für Google Translate, Maps, Youtube und Co. angekündigt.  ( 4 min )